Skip to content

Commit 6e6a0c7

Browse files
committed
ELI-577: Fixes permissions for test
1 parent 63585be commit 6e6a0c7

2 files changed

Lines changed: 4 additions & 1 deletion

File tree

infrastructure/stacks/iams-developer-roles/github_actions_policies.tf

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -70,6 +70,7 @@ resource "aws_iam_policy" "lambda_management" {
7070
"lambda:PutProvisionedConcurrencyConfig",
7171
"lambda:DeleteProvisionedConcurrencyConfig",
7272
"lambda:ListProvisionedConcurrencyConfigs",
73+
"lambda:PutFunctionConcurrency",
7374

7475
],
7576
Resource = [
@@ -304,7 +305,8 @@ resource "aws_iam_policy" "api_infrastructure" {
304305
# WAF v2 logs (both naming conventions)
305306
"arn:aws:logs:${var.default_aws_region}:${data.aws_caller_identity.current.account_id}:log-group:/aws/wafv2/*",
306307
"arn:aws:logs:${var.default_aws_region}:${data.aws_caller_identity.current.account_id}:log-group:aws-wafv2-logs-*",
307-
"arn:aws:logs:${var.default_aws_region}:${data.aws_caller_identity.current.account_id}:log-group:aws-waf-logs-*"
308+
"arn:aws:logs:${var.default_aws_region}:${data.aws_caller_identity.current.account_id}:log-group:aws-waf-logs-*",
309+
"arn:aws:logs:${var.default_aws_region}:${data.aws_caller_identity.current.account_id}:log-group:/aws/stepfunctions/*"
308310
]
309311
},
310312
{

infrastructure/stacks/iams-developer-roles/iams_permissions_boundary.tf

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -171,6 +171,7 @@ data "aws_iam_policy_document" "permissions_boundary" {
171171
"lambda:PutProvisionedConcurrencyConfig",
172172
"lambda:DeleteProvisionedConcurrencyConfig",
173173
"lambda:ListProvisionedConcurrencyConfigs",
174+
"lambda:PutFunctionConcurrency",
174175

175176
# CloudWatch Logs - log management
176177
"logs:*",

0 commit comments

Comments
 (0)