Terraform resource: aws secretsmanager secret policy

aws_secretsmanager_secret_policy(tf.io)

Official example

resource "aws_secretsmanager_secret" "example" {
 name = "example"
}

data "aws_iam_policy_document" "example" {
 statement {
   sid    = "EnableAnotherAWSAccountToReadTheSecret"
   effect = "Allow"

   principals {
     type        = "AWS"
     identifiers = ["arn:aws:iam::123456789012:root"]
   }

   actions   = ["secretsmanager:GetSecretValue"]
   resources = ["*"]
 }
}

resource "aws_secretsmanager_secret_policy" "example" {
 secret_arn = aws_secretsmanager_secret.example.arn
 policy     = data.aws_iam_policy_document.example.json
}

Related

• Error: reading Secrets Manager Secret (xxx) policy: contains invalid principals

See also

• Terraform Secrets Manager: aws_secretsmanager_secret, aws_secretsmanager_secret_version, aws_secretsmanager_secret_policy, aws_secretsmanager_secret_rotation