File tree Expand file tree Collapse file tree
infrastructure/stacks/iams-developer-roles Expand file tree Collapse file tree Original file line number Diff line number Diff line change @@ -70,6 +70,7 @@ resource "aws_iam_policy" "lambda_management" {
7070 " lambda:PutProvisionedConcurrencyConfig" ,
7171 " lambda:DeleteProvisionedConcurrencyConfig" ,
7272 " lambda:ListProvisionedConcurrencyConfigs" ,
73+ " lambda:PutFunctionConcurrency" ,
7374
7475 ],
7576 Resource = [
@@ -304,7 +305,8 @@ resource "aws_iam_policy" "api_infrastructure" {
304305 # WAF v2 logs (both naming conventions)
305306 " arn:aws:logs:${ var . default_aws_region } :${ data . aws_caller_identity . current . account_id } :log-group:/aws/wafv2/*" ,
306307 " arn:aws:logs:${ var . default_aws_region } :${ data . aws_caller_identity . current . account_id } :log-group:aws-wafv2-logs-*" ,
307- " arn:aws:logs:${ var . default_aws_region } :${ data . aws_caller_identity . current . account_id } :log-group:aws-waf-logs-*"
308+ " arn:aws:logs:${ var . default_aws_region } :${ data . aws_caller_identity . current . account_id } :log-group:aws-waf-logs-*" ,
309+ " arn:aws:logs:${ var . default_aws_region } :${ data . aws_caller_identity . current . account_id } :log-group:/aws/stepfunctions/*"
308310 ]
309311 },
310312 {
Original file line number Diff line number Diff line change @@ -171,6 +171,7 @@ data "aws_iam_policy_document" "permissions_boundary" {
171171 " lambda:PutProvisionedConcurrencyConfig" ,
172172 " lambda:DeleteProvisionedConcurrencyConfig" ,
173173 " lambda:ListProvisionedConcurrencyConfigs" ,
174+ " lambda:PutFunctionConcurrency" ,
174175
175176 # CloudWatch Logs - log management
176177 " logs:*" ,
You can’t perform that action at this time.
0 commit comments