Merge pull request #424 from aws-solutions/feature/update-v5.1.2

Allow bucket notification and listing versions for CFNLambda
aws-solutions · Mar 14, 2022 · a2b9195 · a2b9195
2 parents 8918711 + 4936c05
commit a2b9195
Show file tree

Hide file tree

Showing 3 changed files with 9 additions and 0 deletions.
diff --git a/templates/dev/bootstrap/index.js b/templates/dev/bootstrap/index.js
@@ -87,8 +87,11 @@ module.exports = {
           "Version": "2012-10-17",
           "Statement": [
             {
+              "Sid": "CFNLambdaS3Access",
               "Effect": "Allow",
               "Action": [
+                "s3:ListBucketVersions",
+                "s3:PutBucketNotification",
                 "s3:PutObject",
                 "s3:GetObject",
                 "s3:GetObjectVersion",

diff --git a/templates/dev/bucket.js b/templates/dev/bucket.js
@@ -89,8 +89,11 @@ module.exports = outputs('dev/bootstrap')
               "Version": "2012-10-17",
               "Statement": [
                 {
+                  "Sid": "CFNLambdaS3Access",
                   "Effect": "Allow",
                   "Action": [
+                    "s3:ListBucketVersions",
+                    "s3:PutBucketNotification",
                     "s3:PutObject",
                     "s3:GetObject",
                     "s3:DeleteObjectVersion",

diff --git a/templates/master/roles.json b/templates/master/roles.json
@@ -271,8 +271,11 @@
                   "Resource": ["*"]
                 },
                 {
+                  "Sid": "CFNLambdaS3Access",
                   "Effect": "Allow",
                   "Action": [
+                    "s3:ListBucketVersions",
+                    "s3:PutBucketNotification",
                     "s3:PutObject",
                     "s3:GetObject",
                     "s3:DeleteObjectVersion",