Merge pull request #112 from Sea-Haven-Industries/fix/site-plan-describe-function

fix(iam): allow site plan role to describe CF function (PLAT-106)
2026-10-07 16:08:55 +00:00 · 2026-08-20 15:58:21 -04:00 · 2026-08-20 15:22:09 -04:00
1 changed files with 8 additions and 0 deletions
--- a/lib/terraform-substrate/terraform-substrate.template.yaml
+++ b/lib/terraform-substrate/terraform-substrate.template.yaml
@ -1472,6 +1472,14 @@ Resources:
                  - cloudfront:Get*
                  - cloudfront:List*
                Resource: "*"
+              # aws_cloudfront_function refresh reads DEVELOPMENT via
+              # DescribeFunction. Get* does not cover that API (PLAT-106).
+              - Sid: RefreshCloudFrontFunction
+                Effect: Allow
+                Action:
+                  - cloudfront:DescribeFunction
+                Resource:
+                  - !Sub "arn:aws:cloudfront::${AWS::AccountId}:function/seahaven-site-prod-directory-index"
              - Sid: RefreshAcm
                Effect: Allow
                Action:
Author	SHA1	Message	Date
Adam Moussa	14bcbc8384	Merge pull request #112 from Sea-Haven-Industries/fix/site-plan-describe-function Some checks are pending Deploy / deploy-management (push) Waiting to run Details Deploy / deploy-external-dev (push) Waiting to run Details Deploy / deploy-security (push) Waiting to run Details Deploy / deploy-dev (push) Waiting to run Details Deploy / deploy-prod (push) Waiting to run Details fix(iam): allow site plan role to describe CF function (PLAT-106)	2026-08-20 15:58:21 -04:00
Adam Moussa	9bffddfd7b	fix(iam): allow site plan role to describe CF function (PLAT-106)	2026-08-20 15:22:09 -04:00