refactor

FloRul · Apr 19, 2024 · 3f3a519 · 3f3a519
1 parent e8fa2b3
commit 3f3a519
Showing 1 changed file with 15 additions and 7 deletions.
diff --git a/state_machines/email_form_fill/state_machine.tf b/state_machines/email_form_fill/state_machine.tf
@@ -12,16 +12,24 @@ resource "aws_iam_role" "iam_for_sfn" {
         "Effect": "Allow",
         "Sid": ""
       },
+  
+    ]
+  }
+  EOF
+}
+
+resource "aws_iam_role_policy" "sfn_lambda_s3_access" {
+  name   = "sfn_lambda_s3_access"
+  role   = aws_iam_role.iam_for_sfn.id
+
+  policy = <<EOF
+  {
+    "Version": "2012-10-17",
+    "Statement": [
       {
         "Effect": "Allow",
         "Action": [
-          "lambda:InvokeFunction"
-        ],
-        "Resource": "*"
-      },
-      {
-        "Effect": "Allow",
-        "Action": [
+          "lambda:InvokeFunction",
           "s3:PutObject",
           "s3:GetObject",
           "s3:AbortMultipartUpload",