Merge pull request #1074 from dbsystel/fix/1073-iam-policy

fix: 1073 fix IAM policy for string parameters
dbsystel · Nov 21, 2024 · 23ac30a · 23ac30a
2 parents 8f227a5 + d2e0adf
commit 23ac30a
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/src/SopsSync.ts b/src/SopsSync.ts
@@ -344,7 +344,11 @@ export class SopsSync extends Construct {
               resources: [
                 `arn:aws:ssm:${Stack.of(this).region}:${
                   Stack.of(this).account
-                }:parameter/${props.parameterName}`,
+                }:parameter${
+                  props.parameterName.startsWith('/')
+                    ? props.parameterName
+                    : `/${props.parameterName}`
+                }`,
               ],
             }),
           );