The current setup allows the pipeline to read ssm/parameter/* on the dev account.
I see two options to improve this:
a) reduce to only the required parameters. This might require a lot of effort to add new parameters when project develops further.
b) reduce to defined PREFIX of parameters. This allows still easy adding of new parameters, but restricts it to the project specific prefix.
The current setup allows the pipeline to read ssm/parameter/* on the dev account.
I see two options to improve this: a) reduce to only the required parameters. This might require a lot of effort to add new parameters when project develops further. b) reduce to defined PREFIX of parameters. This allows still easy adding of new parameters, but restricts it to the project specific prefix.
I prefer option B.