File tree 1 file changed +20
-0
lines changed
1 file changed +20
-0
lines changed Original file line number Diff line number Diff line change @@ -186,6 +186,7 @@ Resources:
186
186
- !Ref CryptoToolsKMS
187
187
- !Ref CodeBuildCIBatchPolicy
188
188
- !Ref CodeBuildBasePolicy
189
+ - !Ref SecretsManagerCIPolicy
189
190
190
191
CodeBuildBatchPolicy :
191
192
Type : " AWS::IAM::ManagedPolicy"
@@ -309,6 +310,25 @@ Resources:
309
310
}
310
311
]
311
312
}
313
+
314
+ SecretsManagerCIPolicy :
315
+ Type : " AWS::IAM::ManagedPolicy"
316
+ Properties :
317
+ ManagedPolicyName : !Sub "CryptoTools-SecretsManager-${ProjectName}-release"
318
+ Path : " /service-role/"
319
+ PolicyDocument : !Sub |
320
+ {
321
+ "Version": "2012-10-17",
322
+ "Statement": [
323
+ {
324
+ "Effect": "Allow",
325
+ "Resource": [
326
+ "arn:aws:secretsmanager:us-west-2:587316601012:secret:Github/aws-crypto-tools-ci-bot-AGUB3U"
327
+ ],
328
+ "Action": "secretsmanager:GetSecretValue"
329
+ }
330
+ ]
331
+ }
312
332
313
333
# There exist public AWS KMS CMKs that are used for testing
314
334
# Take care with these CMKs they are **ONLY** for testing!!!
You can’t perform that action at this time.
0 commit comments