From 09ba573a816cc4fa9898c1700136bb332801721c Mon Sep 17 00:00:00 2001 From: Tom Jenkinson Date: Fri, 12 Feb 2021 17:41:33 +0000 Subject: [PATCH] fix(codepipeline-actions): use BatchGetBuildBatches permission for batch builds (#13018) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit My mistake in https://github.com/aws/aws-cdk/pull/11741 🤦 For batch builds the pipeline needs `codebuild:BatchGetBuildBatches`, not `codebuild:BatchGetBuilds` --- .../aws-codepipeline-actions/lib/codebuild/build-action.ts | 2 +- .../test/integ.pipeline-code-build-batch.expected.json | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/packages/@aws-cdk/aws-codepipeline-actions/lib/codebuild/build-action.ts b/packages/@aws-cdk/aws-codepipeline-actions/lib/codebuild/build-action.ts index 1fc1611bd9ff2..54735d4ec1d9d 100644 --- a/packages/@aws-cdk/aws-codepipeline-actions/lib/codebuild/build-action.ts +++ b/packages/@aws-cdk/aws-codepipeline-actions/lib/codebuild/build-action.ts @@ -156,7 +156,7 @@ export class CodeBuildAction extends Action { options.role.addToPolicy(new iam.PolicyStatement({ resources: [this.props.project.projectArn], actions: [ - 'codebuild:BatchGetBuilds', + `codebuild:${this.props.executeBatchBuild ? 'BatchGetBuildBatches' : 'BatchGetBuilds'}`, `codebuild:${this.props.executeBatchBuild ? 'StartBuildBatch' : 'StartBuild'}`, `codebuild:${this.props.executeBatchBuild ? 'StopBuildBatch' : 'StopBuild'}`, ], diff --git a/packages/@aws-cdk/aws-codepipeline-actions/test/integ.pipeline-code-build-batch.expected.json b/packages/@aws-cdk/aws-codepipeline-actions/test/integ.pipeline-code-build-batch.expected.json index 13357ba22c85b..3e9b5d76ec027 100644 --- a/packages/@aws-cdk/aws-codepipeline-actions/test/integ.pipeline-code-build-batch.expected.json +++ b/packages/@aws-cdk/aws-codepipeline-actions/test/integ.pipeline-code-build-batch.expected.json @@ -164,7 +164,7 @@ }, { "Action": [ - "codebuild:BatchGetBuilds", + "codebuild:BatchGetBuildBatches", "codebuild:StartBuildBatch", "codebuild:StopBuildBatch" ],