I m trying to attach specific permissions and running into a Serverless Stack #help

I’m trying to attach specific permissions and runn...

Clayton

11/10/2021, 2:29 PM

I’m trying to attach specific permissions and running into an error. This syntax works –

Copy code

api.attachPermissionsToRoute('POST /', [eventHubBus]);

This syntax…

Copy code

api.attachPermissionsToRoute('POST /', [[eventHubBus, 'grantPutEventsTo']]);

…throws an error –

Copy code

TypeError: construct[methodName] is not a function

This seems to happen with using either ``attachPermissions` or

.attachPermissionsToRoute

. Am I monkeying up the syntax somehow or is there be another issue that might cause this? Thanks

Clayton

11/10/2021, 2:32 PM

Doing it via adding a list of IAM Policies does work but requires import of iam and of course is a lot more verbose –

Copy code

api.attachPermissionsToRoute('POST /', [
  new iam.PolicyStatement({
    actions: ["events:PutEvents"],
    effect: iam.Effect.ALLOW,
    resources: [ eventHubBus.eventBusArn ],
  }),
]);

thdxr

11/10/2021, 2:47 PM

eventHubBus

an sst construct or cdk

Clayton

11/10/2021, 2:48 PM

It is an SST construct created from an existing bus -

Copy code

const eventHubBus = new sst.EventBus(this, 'Event Hub Bus', {
  eventBridgeEventBus: events.EventBus.fromEventBusArn(this, 'EventHubBus', subsystemEventHubBusArn),
});

thdxr

11/10/2021, 2:48 PM

try this

thdxr

11/10/2021, 2:48 PM

Copy code

[eventHubBus.eventBridgeEventBus, "grantPutEventsTo"]

thdxr

11/10/2021, 2:49 PM

We definitely need to improve this, seems like people get tripped up by it a lot

Clayton

11/10/2021, 2:51 PM

When I try that syntax to reference the internal CDK bus I get this error -

Copy code

error TS2740: Type 'IEventBus' is missing the following properties from type 'Construct': onValidate, onPrepare, onSynthesize, validate, and 2 more.

thdxr

11/10/2021, 2:52 PM

Looks like we have too broad of a type on that. This is verbose but can you do

Copy code

[<events.EventBus>eventHubBus.eventBridgeEventBus, "grantPutEventsTo"]

thdxr

11/10/2021, 2:53 PM

@Frank curious if you considered making this api

Copy code

[eventBus.grantPutEventsTo]

Instead of a tuple with a string for the function name?

Clayton

11/10/2021, 2:56 PM

Ah, interesting. That worked. Thanks Dax. Out of curiosity - what is this additional syntax at the head with the carets called?

<events.EventBus>

thdxr

11/10/2021, 3:00 PM

In a typical statically typed language it's called casting, not sure if TS has different terminology

Frank

11/11/2021, 7:16 PM

@thdxr

[eventBus.grantPutEventsTo]

Yeah definitely looks cleaner.. I wasn’t able to get it to work 😅 and went with the current way we have.

Frank

11/11/2021, 7:17 PM

That said, I discovered after that some

grantX

calls take more than 1 argument. Not sure how the syntax will look like.

9 Views

Open in Slack

Previous Next