fix IAM

devksingh4 · devksingh4 · commit 35b8e1f9c5a5 · 2025-04-07T12:42:22.000-05:00
diff --git a/cloudformation/iam.yml b/cloudformation/iam.yml
@@ -176,6 +176,7 @@ Resources:
                 Effect: Allow
                 Resource:
                   - Fn::Sub: arn:aws:secretsmanager:${AWS::Region}:${AWS::AccountId}:secret:infra-core-api-entra*
+                  - Fn::Sub: arn:aws:secretsmanager:${AWS::Region}:${AWS::AccountId}:secret:infra-core-api-ro-entra*
 
   # SQS Lambda IAM Role
   SqsLambdaIAMRole:
