From 87059e4f0df6a50a6a0eed6ca5319e52055047c6 Mon Sep 17 00:00:00 2001 From: Anthony Lukach Date: Fri, 27 Jan 2023 15:45:58 -0800 Subject: [PATCH 1/2] Attempt to fix issues around assume role --- lib/ingestor-api/index.ts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/ingestor-api/index.ts b/lib/ingestor-api/index.ts index 772089b..dff8966 100644 --- a/lib/ingestor-api/index.ts +++ b/lib/ingestor-api/index.ts @@ -108,7 +108,7 @@ export class StacIngestor extends Construct { }); props.table.grantReadWriteData(handler); - props.dataAccessRole.grant(handler.grantPrincipal, "sts:AssumeRole"); + props.dataAccessRole.grantAssumeRole(handler); return handler; } From f3acb20a7ec0c88c73a9f3e14d704d883e9e48fa Mon Sep 17 00:00:00 2001 From: Anthony Lukach Date: Thu, 2 Feb 2023 17:19:14 -0700 Subject: [PATCH 2/2] Assume handler_role, not handler.grant_principle --- lib/ingestor-api/index.ts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/ingestor-api/index.ts b/lib/ingestor-api/index.ts index dff8966..d2286c2 100644 --- a/lib/ingestor-api/index.ts +++ b/lib/ingestor-api/index.ts @@ -108,7 +108,7 @@ export class StacIngestor extends Construct { }); props.table.grantReadWriteData(handler); - props.dataAccessRole.grantAssumeRole(handler); + props.dataAccessRole.grantAssumeRole(handler_role); return handler; }