I have a lambda that is trying to write to my firehose Deliv Serverless Stack #help

I have a lambda that is trying to write to my fire...

Daniel Gato

01/15/2022, 7:11 PM

I have a lambda that is trying to write to my firehose DeliveryStream instance. This permission works:

Copy code

'POST    /collect': {
  function: {
    handler: 'src/analytics/create.main',
    environment: {
      ANALYTICS_DELIVERY_STREAM_NAME: analyticsDeliveryStream.deliveryStreamName,
    },
    permissions: [analyticsDeliveryStream],
  },
},

When I add it, it says

Error: The specified permissions are not supported.

Is there a way to go around it?

Daniel Gato

01/15/2022, 7:27 PM

Note that ‘firehose:PutRecord’ seems to work, put I would like to have that for only this data stream.

Frank

01/15/2022, 8:38 PM

Hi @Daniel Gato, can I see how you are creating the

analyticsDeliveryStream

Daniel Gato

01/15/2022, 8:48 PM

Copy code

export default class AnalyticsStack extends sst.Stack {
  constructor(scope, id, props) {
    super(scope, id, props);

    this.analyticsBucket = new sst.Bucket(this, 'Analytics');

    this.deliveryStream = new firehose.DeliveryStream(this, 'Delivery Stream', {
      destinations: [new destinations.S3Bucket(this.analyticsBucket.s3Bucket)],
    });
  }
}

Daniel Gato

01/15/2022, 8:53 PM

I think this is working now:

Copy code

POST /collect': {
          function: {
            handler: 'src/analytics/create.main',
            environment: {
              ANALYTICS_DELIVERY_STREAM_NAME: analyticsDeliveryStream.deliveryStreamName,
            },
            permissions: [
              new iam.PolicyStatement({
                actions: ['firehose:PutRecord'],
                effect: iam.Effect.ALLOW,
                resources: [analyticsDeliveryStream.deliveryStreamArn],
              }),
              // 'firehose:PutRecord',
            ],
          },

Frank

01/16/2022, 2:44 AM

DeliverStream

wasn’t supported by the shorthand permission syntax - https://docs.serverless-stack.com/util/Permissions#supported-constructs

Frank

01/16/2022, 2:45 AM

However, I just submitted a PR to add support for it - https://github.com/serverless-stack/serverless-stack/pull/1266

Frank

01/16/2022, 2:45 AM

Will merge once the test pass. And what u had originally would work:

permissions: [analyticsDeliveryStream],

Daniel Gato

01/16/2022, 10:57 PM

awesome, will test when it’s released

Open in Slack

Previous Next