From 569383d897c062da35f907b458773d01e99becee Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Igor=20Anic=CC=81?= Date: Sun, 2 Oct 2022 14:57:42 +0200 Subject: [PATCH] fix node creation (aws install command) Aws changed required iIAM permission for setting lambda function tags. `You are receiving this email because the AWS team has identified that your account creates Lambda functions with resource tags, specifically by passing tags as part of the lambda:CreateFunction API call. This action previously did not require an explicit lambda:TagResource API permission. This behavior is inconsistent compared to adding tags separately after the function was created using the lambda:TagResource API, which does require an explicit permission. To improve consistency and Lambda tag security, Lambda will require explicit lambda:TagResource API permissions to allow tagging of functions when done via the lambda:CreateFunction moving forward.` --- cli/controller/setup_stack_template.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/cli/controller/setup_stack_template.yml b/cli/controller/setup_stack_template.yml index 8ca8395..e2a6fe4 100644 --- a/cli/controller/setup_stack_template.yml +++ b/cli/controller/setup_stack_template.yml @@ -45,6 +45,7 @@ Resources: - lambda:UpdateFunctionCode - lambda:GetFunctionConfiguration - lambda:UpdateFunctionConfiguration + - lambda:TagResource Resource: - arn:aws:lambda:*:*:function:mantil-*-{{.Suffix}} - arn:aws:lambda:*:*:layer:*:*