eks-for-prod

Version:

EKS Cluster + EFS Filesystem + Aurora Serverless Cluster

25 lines (24 loc) • 791 B

JavaScript

"use strict";
Object.defineProperty(exports, "__esModule", { value: true });
exports.externalSecretsPolicy = void 0;
const externalSecretsPolicy = (secretsArns, parametersArns) => ({
    'Version': '2012-10-17',
    'Statement': [
        {
            'Effect': 'Allow',
            'Action': [
                'secretsmanager:GetResourcePolicy',
                'secretsmanager:GetSecretValue',
                'secretsmanager:DescribeSecret',
                'secretsmanager:ListSecretVersionIds'
            ],
            'Resource': [...(secretsArns || ['*'])]
        },
        {
            'Effect': 'Allow',
            'Action': 'ssm:GetParameter',
            'Resource': [...(parametersArns || ['*'])]
        }
    ]
});
exports.externalSecretsPolicy = externalSecretsPolicy;