3 ms·
AmazonSSMManagedInstanceCore is still too much access, it has unscoped ssm:GetParameter! I hope you weren't trying to protect any secrets in ParameterStore!
by x3n0ph3n3 7y ago
AmazonSSMManagedInstanceCore is still too much access, it has unscoped ssm:GetParameter! I hope you weren't trying to protect any secrets in ParameterStore!
- acdha 7y agoDoesn’t that still fail if you don’t also have the corresponding decrypt KMS permission?