Skip to content

Commit

Permalink
fix node creation (aws install command)
Browse files Browse the repository at this point in the history
Aws changed required iIAM permission for setting lambda function tags.

`You are receiving this email because the AWS team has identified that your account creates Lambda functions with resource tags, specifically by passing tags as part of the lambda:CreateFunction API call. This action previously did not require an explicit lambda:TagResource API permission. This behavior is inconsistent compared to adding tags separately after the function was created using the lambda:TagResource API, which does require an explicit permission. To improve consistency and Lambda tag security, Lambda will require explicit lambda:TagResource API permissions to allow tagging of functions when done via the lambda:CreateFunction moving forward.`
  • Loading branch information
ianic committed Oct 2, 2022
1 parent 4480872 commit 569383d
Showing 1 changed file with 1 addition and 0 deletions.
1 change: 1 addition & 0 deletions cli/controller/setup_stack_template.yml
Original file line number Diff line number Diff line change
Expand Up @@ -45,6 +45,7 @@ Resources:
- lambda:UpdateFunctionCode
- lambda:GetFunctionConfiguration
- lambda:UpdateFunctionConfiguration
- lambda:TagResource
Resource:
- arn:aws:lambda:*:*:function:mantil-*-{{.Suffix}}
- arn:aws:lambda:*:*:layer:*:*
Expand Down

0 comments on commit 569383d

Please sign in to comment.