feat(*): Updating iam firehose policy

daniel-cottone · Jul 29, 2018 · c6f706a · c6f706a
1 parent 0ef0852
commit c6f706a
Showing 1 changed file with 30 additions and 1 deletion.
diff --git a/templates/iam-firehose.json b/templates/iam-firehose.json
@@ -3,7 +3,8 @@
     "Type": "AWS::IAM::Role",
     "DependsOn": [
       "ServerlessEsLogsS3",
-      "ServerlessEsLogsLogGroup"
+      "ServerlessEsLogsLogGroup",
+      "EsLogsProcesserLambdaFunction"
     ],
     "Properties": {
       "AssumeRolePolicyDocument": {
@@ -113,6 +114,34 @@
               }
             ]
           }
+        },
+        {
+          "PolicyName": {
+            "Fn::Join": [
+              "-",
+              []
+            ]
+          },
+          "PolicyDocument": {
+            "Version": "2012-10-17",
+            "Statement": [
+              {
+                "Effect": "Allow",
+                "Action": [
+                  "lambda:InvokeFunction",
+                  "lambda:GetFunctionConfiguration"
+                ],
+                "Resource": [
+                  {
+                    "Fn::GetAtt": [
+                      "ServerlessEsLogsLogGroup",
+                      "Arn"
+                    ]
+                  }
+                ]
+              }
+            ]
+          }
         }
       ],
       "Path": "/",