File tree Expand file tree Collapse file tree 1 file changed +14
-0
lines changed
Expand file tree Collapse file tree 1 file changed +14
-0
lines changed Original file line number Diff line number Diff line change 1111import awacs .cloudformation
1212import awacs .iam
1313import awacs .sts
14+ import awacs .sns
1415
1516from troposphere .cloudformation import WaitCondition , WaitConditionHandle
1617
@@ -51,6 +52,9 @@ def create_template(self):
5152 cloudformation_scope = Sub (
5253 "arn:aws:cloudformation:*:${AWS::AccountId}:"
5354 "stack/${StackerNamespace}-*" )
55+ sns_scope = Sub (
56+ "arn:aws:sns:*:${AWS::AccountId}:"
57+ "${StackerNamespace}-*" )
5458 changeset_scope = "*"
5559
5660 # This represents the precise IAM permissions that stacker itself
@@ -119,7 +123,17 @@ def create_template(self):
119123 awacs .cloudformation .DescribeStacks ,
120124 awacs .cloudformation .DescribeStackEvents
121125 ]
126+ ),
127+ Statement (
128+ Effect = "Allow" ,
129+ Resource = [sns_scope ],
130+ Action = [
131+ awacs .sns .CreateTopic ,
132+ awacs .sns .DeleteTopic ,
133+ awacs .sns .GetTopicAttributes
134+ ]
122135 )
136+
123137 ]
124138 )
125139 )
You can’t perform that action at this time.
0 commit comments