Merge pull request #218 from guardian/moreFixes

sf datalake export fixes
guardian · Nov 21, 2018 · e795e88 · e795e88
2 parents 67b4db9 + 16d863f
commit e795e88
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/handlers/sf-datalake-export/cfn.yaml b/handlers/sf-datalake-export/cfn.yaml
@@ -137,7 +137,7 @@ Resources:
             - logs:CreateLogStream
             - logs:PutLogEvents
             - lambda:InvokeFunction
-            Resource: !Sub "arn:aws:logs:${AWS::Region}:${AWS::AccountId}:log-group:/aws/lambda/sf-get-batch-state-${Stage}:log-stream:*"
+            Resource: !Sub "arn:aws:logs:${AWS::Region}:${AWS::AccountId}:log-group:/aws/lambda/sf-download-batch-${Stage}:log-stream:*"
       - PolicyName: ReadPrivateCredentials
         PolicyDocument:
           Statement:
@@ -158,6 +158,7 @@ Resources:
             - s3:PutObject
             - s3:GetObjectVersion
             - s3:DeleteObjectVersion
+            - s3:PutObjectAcl
             Resource: !FindInMap [StageMap, !Ref Stage, destBuckets]
   DownloadBatch:
     Type: AWS::Lambda::Function