Added iam:PassRole permissions to LambdaExecution

Fixes #103
lambci · Jun 9, 2018 · ba6927e · ba6927e
1 parent ac705ca
commit ba6927e
Showing 1 changed file with 9 additions and 3 deletions.
diff --git a/lambci.template b/lambci.template
@@ -5,7 +5,7 @@
     "Version": {
       "Description": "LambCI version",
       "Type": "String",
-      "Default": "0.9.13"
+      "Default": "0.9.14"
     },
     "GithubToken": {
       "Description": "GitHub OAuth token",
@@ -196,8 +196,14 @@
           "PolicyDocument": {
             "Statement": {
               "Effect": "Allow",
-              "Action": "sns:SetTopicAttributes",
-              "Resource": {"Fn::Join": ["", ["arn:aws:sns:*:*:", {"Ref": "AWS::StackName"}, "-*"]]}
+              "Action": [
+                "sns:SetTopicAttributes",
+                "iam:PassRole"
+              ],
+              "Resource": [
+                {"Fn::Join": ["", ["arn:aws:sns:*:*:", {"Ref": "AWS::StackName"}, "-*"]]},
+                {"Fn::Join": ["", ["arn:aws:iam::*:role/", {"Ref": "AWS::StackName"}, "-SnsFailures-*"]]}
+              ]
             }
           }
         }]