Give access to users to access SSM parameters
Closed this issue · 2 comments
smford commented
Standard users do not have permission to run the below command, they perhaps need access to allow them to get the sandbox hsm passwords.
aws ssm get-parameter --query Parameter.Value --output text --with-decryption --name /CLUSTER_NAME/hsm/users/cu/1/password
issyl0 commented
From @blairboy362 in Slack yesterday:
That should be done from hijacked containers in the shared Concourse.
Looks like we need to write some docs. @smford Are you happy to do that? There's some info in the info pipeline config.