Fix customer permission boundary to fix dynamo

datasprayio · Jan 6, 2025 · dcfb285 · dcfb285
1 parent d99bc0b
commit dcfb285
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/dataspray-package/src/main/java/io/dataspray/cdk/stream/control/ControlFunctionStack.java b/dataspray-package/src/main/java/io/dataspray/cdk/stream/control/ControlFunctionStack.java
@@ -96,8 +96,8 @@ public ControlFunctionStack(Construct parent, DeployEnvironment deployEnv, Strin
                                         "dynamodb:BatchWriteItem",
                                         "dynamodb:DeleteItem"))
                                 .resources(ImmutableList.of(
-                                        "arn:aws:logs:" + getRegion() + ":" + getAccount() + ":table/" + LambdaDeployerImpl.FUN_NAME_WILDCARD_GETTER.apply(getDeployEnv()),
-                                        "arn:aws:logs:" + getRegion() + ":" + getAccount() + ":table/" + LambdaDeployerImpl.FUN_NAME_WILDCARD_GETTER.apply(getDeployEnv()) + "/index/*"))
+                                        "arn:aws:dynamodb:" + getRegion() + ":" + getAccount() + ":table/" + LambdaDeployerImpl.FUN_NAME_WILDCARD_GETTER.apply(getDeployEnv()),
+                                        "arn:aws:dynamodb:" + getRegion() + ":" + getAccount() + ":table/" + LambdaDeployerImpl.FUN_NAME_WILDCARD_GETTER.apply(getDeployEnv()) + "/index/*"))
                                 .build(),
                         PolicyStatement.Builder.create()
                                 .sid(getConstructIdCamelCase(LambdaDeployerImpl.CUSTOMER_FUNCTION_PERMISSION_CUSTOMER_LAMBDA_SQS + "PermissionBoundary"))