No resources match for lambda:AddLayerVersionPermission

[asantos-fuze]

Hi,

I've been testing parliament and I've found what I believe is an issue.
I was not expecting it to fail agains this policy

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "TestPol",
            "Effect": "Allow",
            "Action": "lambda:AddLayerVersionPermission",
            "Resource": "arn:aws:lambda:*:123456789012:layer:sol-*:*"
        }
    ]
}

# parliament --file policy3.json
INVALID - No resources match for lambda:AddLayerVersionPermission which requires a resource format of arn:*:lambda:*:*:layer:*:* for the resource layerVersion* - {'filepath': None}

On the DOCs we have

arn:${Partition}:lambda:${Region}:${Account}:layer:${LayerName}:${LayerVersion}

Do I have to have explicit * instead of a account if and layer name?

[0xdabbad00]

This looks like a bug in parliament. I'm guessing it doesn't it doesn't like that sol-* allows it to match until the end, but then there is a :* at the end. Your policy looks correct to me so I'll look into fixing this.

[0xdabbad00]

Should be resolved in #37