adam/seahaven-org-baseline
1
0
Fork 0
mirror of https://github.com/Sea-Haven-Industries/seahaven-org-baseline.git synced 2026-10-06 01:41:59 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Merge pull request #87 from Sea-Haven-Industries/fix/hcptf-procurement-ingest-tagging
Some checks are pending
Deploy / deploy-management (push) Waiting to run
Details
Deploy / deploy-external-dev (push) Waiting to run
Details
Deploy / deploy-security (push) Waiting to run
Details
Deploy / deploy-dev (push) Waiting to run
Details
Deploy / deploy-prod (push) Waiting to run
Details

Browse source 
fix(iam): allow API GW and ESM tagging for procurement-ingest (PLAT-86)
This commit is contained in:
Adam Moussa 2026-08-07 11:09:25 -04:00 • committed by GitHub
commit eb2fcfd40b
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 6 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
lib/terraform-substrate/terraform-substrate.template.yaml
View file

@ -1180,6 +1180,10 @@ Resources:
Action: Action:
- lambda:GetEventSourceMapping - lambda:GetEventSourceMapping
- lambda:ListTags - lambda:ListTags
# Tag/Untag on ESM UUID ARNs do not carry FunctionArn in the
# request context (provider default_tags on import).
- lambda:TagResource
- lambda:UntagResource
Resource: "*" Resource: "*"
- Sid: LambdaEventSourceMappings - Sid: LambdaEventSourceMappings
Effect: Allow Effect: Allow
@ -1187,8 +1191,6 @@ Resources:
- lambda:CreateEventSourceMapping - lambda:CreateEventSourceMapping
- lambda:DeleteEventSourceMapping - lambda:DeleteEventSourceMapping
- lambda:UpdateEventSourceMapping - lambda:UpdateEventSourceMapping
- lambda:TagResource
- lambda:UntagResource
Resource: "*" Resource: "*"
Condition: Condition:
"ForAnyValue:StringLike": "ForAnyValue:StringLike":
@ -1308,6 +1310,8 @@ Resources:
- !Sub "arn:aws:apigateway:us-east-1::/restapis/mvul1efda2/*" - !Sub "arn:aws:apigateway:us-east-1::/restapis/mvul1efda2/*"
- arn:aws:apigateway:us-east-1::/domainnames/procurement-api.seahaven.com - arn:aws:apigateway:us-east-1::/domainnames/procurement-api.seahaven.com
- arn:aws:apigateway:us-east-1::/domainnames/procurement-api.seahaven.com/* - arn:aws:apigateway:us-east-1::/domainnames/procurement-api.seahaven.com/*
# TagResource/UntagResource authorize against /tags/<arn>.
- arn:aws:apigateway:us-east-1::/tags/*
- Sid: SesReceiptRules - Sid: SesReceiptRules
Effect: Allow Effect: Allow
Action: Action: