Hacker News new | ask | show | jobs
by x3n0ph3n3 2287 days ago
AmazonSSMManagedInstanceCore is still too much access, it has unscoped ssm:GetParameter! I hope you weren't trying to protect any secrets in ParameterStore!
1 comments
acdha 2287 days ago
Doesn’t that still fail if you don’t also have the corresponding decrypt KMS permission?
link