@devramps/cli 0.1.16 → 0.1.17
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/index.js +18 -1
- package/package.json +1 -1
package/dist/index.js
CHANGED
|
@@ -2030,7 +2030,8 @@ function buildOrgRolePolicies(orgSlug) {
|
|
|
2030
2030
|
Action: [
|
|
2031
2031
|
"kms:Encrypt",
|
|
2032
2032
|
"kms:Decrypt",
|
|
2033
|
-
"kms:GenerateDataKey*"
|
|
2033
|
+
"kms:GenerateDataKey*",
|
|
2034
|
+
"kms:DescribeKey"
|
|
2034
2035
|
],
|
|
2035
2036
|
Resource: "*",
|
|
2036
2037
|
Condition: {
|
|
@@ -2077,6 +2078,22 @@ function buildOrgRolePolicies(orgSlug) {
|
|
|
2077
2078
|
"s3:GetBucketLocation"
|
|
2078
2079
|
],
|
|
2079
2080
|
Resource: "*"
|
|
2081
|
+
},
|
|
2082
|
+
{
|
|
2083
|
+
Sid: "AllowSecretsManagerOperations",
|
|
2084
|
+
Effect: "Allow",
|
|
2085
|
+
Action: [
|
|
2086
|
+
"secretsmanager:CreateSecret",
|
|
2087
|
+
"secretsmanager:GetSecretValue",
|
|
2088
|
+
"secretsmanager:PutSecretValue",
|
|
2089
|
+
"secretsmanager:UpdateSecret",
|
|
2090
|
+
"secretsmanager:DeleteSecret",
|
|
2091
|
+
"secretsmanager:DescribeSecret",
|
|
2092
|
+
"secretsmanager:TagResource"
|
|
2093
|
+
],
|
|
2094
|
+
Resource: {
|
|
2095
|
+
"Fn::Sub": "arn:aws:secretsmanager:*:${AWS::AccountId}:secret:devramps/*"
|
|
2096
|
+
}
|
|
2080
2097
|
}
|
|
2081
2098
|
]
|
|
2082
2099
|
}
|