Post

Secrets Manager Policies

Secrets Manager Policies

  • Secrets Manager Read Only Policy:
    1
    2
    3
    4
    5
    6
    7
    8
    9
    10
    11
    12
    13
    14
    15
    16
    17
    18
    19
    20
    
    {
      "Version": "2012-10-17",
      "Statement": [
          {
              "Effect": "Allow",
              "Action": [
                  "secretsmanager:GetResourcePolicy",
                  "secretsmanager:GetSecretValue",
                  "secretsmanager:DescribeSecret",
                  "secretsmanager:ListSecretVersionIds"
              ],
              "Resource": "arn:aws:secretsmanager:us-east-1:XXXXXXXXXXXX:secret:test-api-key-92j430"
          },
          {
              "Effect": "Allow",
              "Action": "secretsmanager:ListSecrets",
              "Resource": "*"
          }
      ]
    }
    
This post is licensed under CC BY 4.0 by the author.