remove ssm resource restriction

CMSgov · Sep 19, 2024 · 7e988a5 · 7e988a5
1 parent 4b49104
commit 7e988a5
Showing 1 changed file with 1 addition and 3 deletions.
diff --git a/ops/terraform/env/mgmt/cloudwatch.tf b/ops/terraform/env/mgmt/cloudwatch.tf
@@ -33,9 +33,7 @@ resource "aws_iam_policy" "github_actions_ci_ops" {
             "ssm:GetParametersByPath",
             "ssm:GetParameter"
           ]
-          Resource = [
-            "arn:aws:ssm:${local.region}:${local.account_id}:parameter/bfd/*"
-          ]
+          Resource = "*"
         },
         {
           Sid    = "AllowDescribeVpcAttributes"