Is there a way to explicitly set the PolicyStateme...
# helpd
Dan Van Brunt
10/05/2021, 2:08 PMIs there a way to explicitly set the PolicyStatement in the
permissions Copy code
permissions: [
[eventsBucket, 'headObject', 'getObject'],
[
new iam.PolicyStatement({
actions: ['ssm:*'],
effect: iam.Effect.ALLOW,
resources: [`arn:aws:ssm:${REGION}:${ACCOUNT_ID}:parameter${SSM_HUBSPOTAPIKEY}`],
}),
],
], Copy code
fun.attachPermissions([
new iam.PolicyStatement({
actions: ["execute-api:Invoke"],
effect: iam.Effect.ALLOW,
resources: [
`arn:aws:execute-api:${region}:${account}:${api.httpApiId}/*`,
],
}),
]);t
thdxr
10/05/2021, 2:09 PMI think if you remove the array around the policy statement it should work
d
Dan Van Brunt
10/05/2021, 2:11 PM@thdxr ya… seems like it might…. but then my 1st permission is linting wrong…
Dan Van Brunt
10/05/2021, 2:11 PMsaying that
getObjectType 'string' is not assignable to type 'undefined'.Dan Van Brunt
10/05/2021, 2:12 PMmaybe you can’t mix and match those two types of permissions?
Dan Van Brunt
10/05/2021, 2:12 PMshort and long form?
t
thdxr
10/05/2021, 2:15 PMI'm not familiar with that first form, I don't think that is supposed to work
thdxr
10/05/2021, 2:16 PM[resource, "functionCallOnResource"]
thdxr
10/05/2021, 2:16 PMIs supported
d
Dan Van Brunt
10/05/2021, 2:17 PMoh… so it should be…
Dan Van Brunt
10/05/2021, 2:17 PM?
t
thdxr
10/05/2021, 2:26 PMI don't think those work either. We only support functions that exist on eventsBucket
d
Dan Van Brunt
10/05/2021, 2:37 PMoh? you mean CDK object functions? I thought it was the policy names?
Dan Van Brunt
10/05/2021, 2:39 PModd that this was working as is and was not erroring out. It’s only now with the add of the SSM stuff is it failing
Dan Van Brunt
10/05/2021, 2:41 PMneed to read up on what
grantReadDan Van Brunt
10/05/2021, 2:41 PMah…
Permits an IAM principal all data read operations from this table: BatchGetItem, GetRecords, GetShardIterator, Query, GetItem, Scan.Dan Van Brunt
10/05/2021, 2:42 PMwould have been cool to have the shorthand I was expecting though 😄
7 Views