Skip to content

Commit 69a6d87

Browse files
committed
fix s3 permissions
1 parent a7d26f7 commit 69a6d87

File tree

1 file changed

+3
-4
lines changed

1 file changed

+3
-4
lines changed

integration/resources/templates/combination/function_with_msk_trigger_and_s3_onfailure_events_destinations.yaml

Lines changed: 3 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -27,12 +27,11 @@ Resources:
2727
logs:CreateLogStream, logs:PutLogEvents, s3:ListBucket]
2828
Effect: Allow
2929
Resource: '*'
30-
- Action: s3:PutObject
30+
- Action: [s3:PutObject, s3:ListBucket]
3131
Effect: Allow
3232
Resource:
33-
Fn::GetAtt:
34-
- PreCreatedS3Bucket
35-
- Arn
33+
- "arn:aws:s3:::*/*"
34+
- "arn:aws:s3:::*"
3635
ManagedPolicyArns:
3736
- !Sub arn:${AWS::Partition}:iam::aws:policy/service-role/AWSLambdaBasicExecutionRole
3837
Tags:

0 commit comments

Comments
 (0)