secret-manager
-password
admin
wscPlayDB
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "Statement1",
"Effect": "Allow",
"Action": [
"kms:Decrypt",
"kms:Encrypt",
"kms:GenerateDataKey"
],
"Resource": [
"arn:aws:kms:ap-northeast-2:339712924586:key/23cd6117-c338-4170-872d-6c72be24c995"
]
},
{
"Sid": "CloudWatchLogsWrite",
"Effect": "Allow",
"Action": [
"logs:CreateLogStream",
"logs:PutLogEvents"
],
"Resource": "arn:aws:logs:*:*:log-group:*:log-stream:*"
},
{
"Sid": "CloudWatchLogsCreateGroup",
"Effect": "Allow",
"Action": [
"logs:CreateLogGroup"
],
"Resource": "arn:aws:logs:*:*:log-group:*"
},
{
"Sid": "S3",
"Effect": "Allow",
"Action": [
"s3:ListBucket",
"s3:GetObject"
],
"Resource": [
"arn:aws:s3:::wsc-q1-iost-1234-bucket",
"arn:aws:s3:::wsc-q1-iost-1234-bucket/*"
]
},
{
"Sid": "ReadOnlyWorldpayDbSecret",
"Effect": "Allow",
"Action": [
"secretsmanager:GetSecretValue",
"secretsmanager:DescribeSecret"
],
"Resource": [
"arn:aws:secretsmanager:ap-northeast-2:339712924586:secret:/secret/db-1LVsm2"
]
}
]
}