alphagov/gsp

Give access to users to access SSM parameters

Closed this issue · 2 comments

Standard users do not have permission to run the below command, they perhaps need access to allow them to get the sandbox hsm passwords.

aws ssm get-parameter --query Parameter.Value --output text --with-decryption --name /CLUSTER_NAME/hsm/users/cu/1/password

From @blairboy362 in Slack yesterday:

That should be done from hijacked containers in the shared Concourse.

Looks like we need to write some docs. @smford Are you happy to do that? There's some info in the info pipeline config.

Closing issue. The problem isn't permission related as originally thought when issue raised, instead the preferred method is to use hijacked containers. Documentation explaining method has been added via this pr to the documentation stored here