fix(ssm): add GetParameters action to grantRead() (aws#3546)

alukach · Aug 6, 2019 · ebaa1b5 · ebaa1b5
1 parent 6ce248b
commit ebaa1b5
Show file tree

Hide file tree

Showing 3 changed files with 8 additions and 1 deletion.
diff --git a/packages/@aws-cdk/aws-ecs/test/test.container-definition.ts b/packages/@aws-cdk/aws-ecs/test/test.container-definition.ts
@@ -359,6 +359,7 @@ export = {
           {
             Action: [
               'ssm:DescribeParameters',
+              'ssm:GetParameters',
               'ssm:GetParameter',
               'ssm:GetParameterHistory'
             ],

diff --git a/packages/@aws-cdk/aws-ssm/lib/parameter.ts b/packages/@aws-cdk/aws-ssm/lib/parameter.ts
@@ -126,7 +126,12 @@ abstract class ParameterBase extends Resource implements IParameter {
   public grantRead(grantee: iam.IGrantable): iam.Grant {
     return iam.Grant.addToPrincipal({
       grantee,
-      actions: ['ssm:DescribeParameters', 'ssm:GetParameter', 'ssm:GetParameterHistory'],
+      actions: [
+        'ssm:DescribeParameters',
+        'ssm:GetParameters',
+        'ssm:GetParameter',
+        'ssm:GetParameterHistory'
+      ],
       resourceArns: [this.parameterArn],
     });
   }

diff --git a/packages/@aws-cdk/aws-ssm/test/integ.parameter.lit.expected.json b/packages/@aws-cdk/aws-ssm/test/integ.parameter.lit.expected.json
@@ -40,6 +40,7 @@
             {
               "Action": [
                 "ssm:DescribeParameters",
+                "ssm:GetParameters",
                 "ssm:GetParameter",
                 "ssm:GetParameterHistory"
               ],