|
|
@@ -3614,13 +3614,20 @@ a <code>path</code> prefix or use <code>Tags</code> filter.</p>
|
|
|
<span class="w"> </span><span class="nt">"Version"</span><span class="p">:</span><span class="w"> </span><span class="s2">"2012-10-17"</span><span class="p">,</span>
|
|
|
<span class="w"> </span><span class="nt">"Statement"</span><span class="p">:</span><span class="w"> </span><span class="p">[</span>
|
|
|
<span class="w"> </span><span class="p">{</span>
|
|
|
+<span class="w"> </span><span class="nt">"Action"</span><span class="w"> </span><span class="p">:</span><span class="w"> </span><span class="p">[</span>
|
|
|
+<span class="w"> </span><span class="s2">"secretsmanager:ListSecrets"</span><span class="p">,</span>
|
|
|
+<span class="w"> </span><span class="s2">"secretsmanager:BatchGetSecretValue"</span>
|
|
|
+<span class="w"> </span><span class="p">],</span>
|
|
|
+<span class="w"> </span><span class="nt">"Effect"</span><span class="w"> </span><span class="p">:</span><span class="w"> </span><span class="s2">"Allow"</span><span class="p">,</span>
|
|
|
+<span class="w"> </span><span class="nt">"Resource"</span><span class="w"> </span><span class="p">:</span><span class="w"> </span><span class="s2">"*"</span>
|
|
|
+<span class="w"> </span><span class="p">},</span>
|
|
|
+<span class="w"> </span><span class="p">{</span>
|
|
|
<span class="w"> </span><span class="nt">"Effect"</span><span class="p">:</span><span class="w"> </span><span class="s2">"Allow"</span><span class="p">,</span>
|
|
|
<span class="w"> </span><span class="nt">"Action"</span><span class="p">:</span><span class="w"> </span><span class="p">[</span>
|
|
|
<span class="w"> </span><span class="s2">"secretsmanager:GetResourcePolicy"</span><span class="p">,</span>
|
|
|
<span class="w"> </span><span class="s2">"secretsmanager:GetSecretValue"</span><span class="p">,</span>
|
|
|
<span class="w"> </span><span class="s2">"secretsmanager:DescribeSecret"</span><span class="p">,</span>
|
|
|
<span class="w"> </span><span class="s2">"secretsmanager:ListSecretVersionIds"</span>
|
|
|
-<span class="w"> </span><span class="s2">"secretsmanager:BatchGetSecretValue"</span>
|
|
|
<span class="w"> </span><span class="p">],</span>
|
|
|
<span class="w"> </span><span class="nt">"Resource"</span><span class="p">:</span><span class="w"> </span><span class="p">[</span>
|
|
|
<span class="w"> </span><span class="s2">"arn:aws:secretsmanager:us-west-2:111122223333:secret:dev-*"</span>
|