Merge pull request #285 from nationalarchives/user_read_client_permis…

…sions user_read_client permissions
nationalarchives · Aug 5, 2024 · b7ec193 · b7ec193
2 parents d89b12f + d623abe
commit b7ec193
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/lambda/templates/rotate_keycloak_secrets_policy.json.tpl b/lambda/templates/rotate_keycloak_secrets_policy.json.tpl
@@ -25,6 +25,7 @@
         "arn:aws:ssm:eu-west-2:${account_id}:parameter/${environment}/keycloak/rotate_secrets_client/secret",
         "arn:aws:ssm:eu-west-2:${account_id}:parameter/${environment}/keycloak/rotate_secrets_client/secret",
         "arn:aws:ssm:eu-west-2:${account_id}:parameter/${environment}/keycloak/user_admin_client/secret",
+        "arn:aws:ssm:eu-west-2:${account_id}:parameter/${environment}/keycloak/user_read_client/secret",
         "${kms_arn}"
       ]
     },