Add missing permissions

ooni · Mar 13, 2024 · a30c79c · a30c79c
1 parent 9b4222a
commit a30c79c
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/tf/modules/oonidevops_github_user/templates/oonidevops_github_policy.json b/tf/modules/oonidevops_github_user/templates/oonidevops_github_policy.json
@@ -125,6 +125,8 @@
                 "secretsmanager:Describe*",
                 "secretsmanager:GetResourcePolicy",
                 "secretsmanager:List*",
+                "secretsmanager:GetSecretValue",
+                "secretsmanager:DescribeSecret",
                 "servicediscovery:DiscoverInstances",
                 "servicediscovery:DiscoverInstancesRevision",
                 "servicediscovery:Get*",