adam/seahaven-org-baseline
1
0
Fork 0
mirror of https://github.com/Sea-Haven-Industries/seahaven-org-baseline.git synced 2026-09-30 08:03:19 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Merge pull request #112 from Sea-Haven-Industries/fix/site-plan-describe-function
Some checks are pending
Deploy / deploy-management (push) Waiting to run
Details
Deploy / deploy-external-dev (push) Waiting to run
Details
Deploy / deploy-security (push) Waiting to run
Details
Deploy / deploy-dev (push) Waiting to run
Details
Deploy / deploy-prod (push) Waiting to run
Details

Browse source 
fix(iam): allow site plan role to describe CF function (PLAT-106)
This commit is contained in:
Adam Moussa 2026-08-20 15:58:21 -04:00 • committed by GitHub
commit 14bcbc8384
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 8 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
lib/terraform-substrate/terraform-substrate.template.yaml
View file

@ -1472,6 +1472,14 @@ Resources:
- cloudfront:Get*
- cloudfront:List*
Resource: "*"
# aws_cloudfront_function refresh reads DEVELOPMENT via
# DescribeFunction. Get* does not cover that API (PLAT-106).
- Sid: RefreshCloudFrontFunction
Effect: Allow
Action:
- cloudfront:DescribeFunction
Resource:
- !Sub "arn:aws:cloudfront::${AWS::AccountId}:function/seahaven-site-prod-directory-index"
- Sid: RefreshAcm
Effect: Allow
Action: