azavea / tilegarden

Serverless raster and vector map tile generation using Mapnik and AWS Lambda
https://azavea.github.io/tilegarden/
Other
97 stars 7 forks source link

Integrate extra role permissions for using S3 #103

Open mattdelsordo opened 6 years ago

mattdelsordo commented 6 years ago

The IAM role that claudia creates by default lacks permissions to access S3, so even if you publish the instance with credentials that have access to the S3 bucket you want, your lambda won't be able to get access. Adding these permissions (AmazonS3ReadOnlyAccess) can be done manually but it would be nice to have Terraform handle it automatically.