Hey! I have a remix app using architect (<https://...
# helpt
Tobias T
05/30/2022, 12:43 PMHey! I have a remix app using architect (https://arc.codes) and I want the catch-all lambda I get from architect that to have access to my SST backend. What's the best way to give the lambda permissions ?
t
Thomas Ankcorn
05/30/2022, 12:54 PMCreate a policy in your SST app to access the resources that you want your catch all lambda to access and then list that policy under the
@awst
Tobias T
05/30/2022, 12:55 PMcool! I'll try that
Tobias T
05/30/2022, 1:21 PMdo not know if Im on the right track here..
Copy code
const policy = new iam.ManagedPolicy(this, "AuthPolicy", {
statements: [
new iam.PolicyStatement({
effect: iam.Effect.ALLOW,
actions: ["cognito-idp:AdminCreateUser"],
resources: [auth.userPoolArn],
}),
],
});appTobias T
05/30/2022, 2:44 PM@Thomas Ankcorn can you point me in the right direction? 🙂
t
Thomas Ankcorn
05/30/2022, 3:31 PMI think you would want to take a stack for it and pass in the resources you want to expose, how you do it depends on which SST version you are using
Thomas Ankcorn
05/30/2022, 3:32 PMthis video might help :_
t
Tobias T
05/30/2022, 3:39 PMI have my stack already setup using the new v1 functional stacks, I just want to figure out how to create a new policy and attach it to my stacks. Something like this? Or should it be created on the "root stack" ?
Copy code
auth.cdk.unauthRole.addToPolicy(
new iam.PolicyStatement({
effect: iam.Effect.ALLOW,
actions: ["cognito-idp:AdminCreateUser"],
resources: [auth.userPoolArn],
}),
);Tobias T
05/30/2022, 3:40 PMRight now I have made a workaround where I create the policy in the AWS console and attach it to arc using the ARN, but I would ideally want to create the policy in code
j
justindra
05/30/2022, 4:01 PMHey @Tobias T, I was looking into using remix in SST too. Curious, are you just setting an API Gateway endpoint to Lambda for this or are you using Lambda@Edge/Cloudfront to cache the requests?
t
Tobias T
05/30/2022, 4:15 PM@justindra we are using Architect for the remix parts and our backend is in SST.
Tobias T
05/30/2022, 4:19 PMnot ideal but we found remix / arc before we found SST 🙂
t
Thomas Ankcorn
05/30/2022, 4:30 PMremix uses api gateway endpoint to lambda I believe you can enable cloudfront with 1 line of config with arc but can’t remember as it has been a while
j
justindra
05/30/2022, 5:05 PMCool thanks! Will probably try if it works this weekend
k
Klaus
05/30/2022, 7:04 PM@Tobias T in case
fn6 Views