adam/payments-dashboard
1
0
Fork 0
mirror of https://github.com/Sea-Haven-Industries/payments-dashboard.git synced 2026-10-04 13:42:12 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Attach org permissions boundary to all Lambda roles

Browse source 
Adds seahaven-lambda-execution-boundary to Globals.Function so every
SAM-auto-generated Lambda execution role carries the boundary. Required
for the INFRA-97 github-cfn-execution-role scope-down to safely permit
iam:CreateRole on this stack.

No explicit AWS::IAM::Role resources exist in this template; the
Globals entry covers all six functions.

Refs: INFRA-103
This commit is contained in:
Adam Moussa 2026-06-10 13:51:27 -04:00
parent 699928116d
commit 3513f5de98
1 changed files with 1 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
template.yaml
View file

@ -9,6 +9,7 @@ Globals:
- arm64 - arm64
Timeout: 30 Timeout: 30
MemorySize: 256 MemorySize: 256
PermissionsBoundary: arn:aws:iam::328440206208:policy/seahaven-lambda-execution-boundary
Environment: Environment:
Variables: Variables:
TABLE_NAME: !Ref DashboardTable TABLE_NAME: !Ref DashboardTable