Skip to content

Commit 03ede75

Browse files
committed
lambda-ssm-parameter-terraform: Fix deprecated managed_policy_arns argument
1 parent 17ef413 commit 03ede75

File tree

1 file changed

+13
-7
lines changed
  • lambda-ssm-parameter-terraform

1 file changed

+13
-7
lines changed

lambda-ssm-parameter-terraform/main.tf

Lines changed: 13 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -50,11 +50,7 @@ data "aws_iam_policy" "lambda_basic_execution_role_policy" {
5050
}
5151

5252
resource "aws_iam_role" "lambda_iam_role" {
53-
name_prefix = "LambdaSSMParameterRole-"
54-
managed_policy_arns = [
55-
data.aws_iam_policy.lambda_basic_execution_role_policy.arn,
56-
aws_iam_policy.lambda_policy.arn
57-
]
53+
name_prefix = "LambdaSSMParameterRole-"
5854

5955
assume_role_policy = <<EOF
6056
{
@@ -73,11 +69,21 @@ resource "aws_iam_role" "lambda_iam_role" {
7369
EOF
7470
}
7571

72+
resource "aws_iam_role_policy_attachment" "lambda_basic_execution" {
73+
role = aws_iam_role.lambda_iam_role.name
74+
policy_arn = data.aws_iam_policy.lambda_basic_execution_role_policy.arn
75+
}
76+
77+
resource "aws_iam_role_policy_attachment" "lambda_ssm" {
78+
role = aws_iam_role.lambda_iam_role.name
79+
policy_arn = aws_iam_policy.lambda_policy.arn
80+
}
81+
7682
data "aws_iam_policy_document" "lambda_policy_document" {
7783
statement {
78-
84+
7985
effect = "Allow"
80-
86+
8187
actions = [
8288
"ssm:GetParameter",
8389
"ssm:PutParameter"

0 commit comments

Comments
 (0)