From 24b5ff974d48fac3ad6d9fdcd44d8171c6f9ad56 Mon Sep 17 00:00:00 2001
From: Thomas Geese <thomas.geese@deutschebahn.com>
Date: Thu, 21 Nov 2024 16:15:25 +0100
Subject: [PATCH 1/2] fix: 1073 fix IAM policy for string parameters

---
 src/SopsSync.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/SopsSync.ts b/src/SopsSync.ts
index 6ceadbc6..0cffa4a2 100644
--- a/src/SopsSync.ts
+++ b/src/SopsSync.ts
@@ -344,7 +344,7 @@ export class SopsSync extends Construct {
               resources: [
                 `arn:aws:ssm:${Stack.of(this).region}:${
                   Stack.of(this).account
-                }:parameter/${props.parameterName}`,
+                }:parameter${props.parameterName.startsWith('/') ? props.parameterName : `/${props.parameterName}`}`,
               ],
             }),
           );

From d2e0adf72efc7c356f4005b0aa2d129fbbf9f06d Mon Sep 17 00:00:00 2001
From: github-actions <github-actions@github.com>
Date: Thu, 21 Nov 2024 15:24:12 +0000
Subject: [PATCH 2/2] chore: self mutation

Signed-off-by: github-actions <github-actions@github.com>
---
 src/SopsSync.ts | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/src/SopsSync.ts b/src/SopsSync.ts
index 0cffa4a2..89c63aed 100644
--- a/src/SopsSync.ts
+++ b/src/SopsSync.ts
@@ -344,7 +344,11 @@ export class SopsSync extends Construct {
               resources: [
                 `arn:aws:ssm:${Stack.of(this).region}:${
                   Stack.of(this).account
-                }:parameter${props.parameterName.startsWith('/') ? props.parameterName : `/${props.parameterName}`}`,
+                }:parameter${
+                  props.parameterName.startsWith('/')
+                    ? props.parameterName
+                    : `/${props.parameterName}`
+                }`,
               ],
             }),
           );