fix: add required permission to SQS message producer

see additional details here https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-key-management.html#sqs-what-permissions-for-sse
github-aws-runners · Mar 30, 2023 · 3f1fada · 3f1fada
1 parent e3708c3
commit 3f1fada
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/modules/webhook/policies/lambda-ssm.json b/modules/webhook/policies/lambda-ssm.json
@@ -14,7 +14,8 @@
     {
         "Effect": "Allow",
         "Action": [
-            "kms:Decrypt"
+            "kms:Decrypt",
+            "kms:GenerateDataKey"
         ],
         "Resource": "${kms_key_arn}"
     %{ endif ~}