add allowed triggers

FloRul · Apr 5, 2024 · bde86d2 · bde86d2
1 parent 48beea4
commit bde86d2
Showing 1 changed file with 11 additions and 2 deletions.
diff --git a/lambdas/rich_pdf_ingestion/lambda.tf b/lambdas/rich_pdf_ingestion/lambda.tf
@@ -48,7 +48,7 @@ module "lambda_function_container_image" {
         "logs:PutLogEvents",
       ]
     }
-    
+
     s3 = {
       effect = "Allow"
       actions = [
@@ -60,11 +60,20 @@ module "lambda_function_container_image" {
         "s3-object-lambda:List*",
         "s3-object-lambda:WriteGetObjectResponse"
       ]
-      
+
       resources = [
         var.ses_bucket_arn,
         "${var.ses_bucket_arn}/*"
       ]
     }
   }
+
+  create_current_version_allowed_triggers = false
+
+  allowed_triggers = {
+    s3 = {
+      principal  = "s3.amazonaws.com"
+      source_arn = var.ses_bucket_arn
+    }
+  }
 }