search

bradmccoydev / LogController

Log Controller
MIT License
1 stars 0 forks source link

Configure IAM for logging controller lambda #3

Open wonboyn opened 3 years ago

wonboyn commented 3 years ago

Only permissions currently required are:

Need ability to extend permissions to allow plugging in of other Log Handlers by allowing submission of messages to other SQS queues

Brad notes: { "Sid": "Sqs", "Effect": "Allow", "Action": "sqs:*", "Resource": [ "${aws_sqs_queue.metrics_queue.arn}", "${aws_sqs_queue.metrics_dlq.arn}", "${aws_sqs_queue.logging_queue.arn}", "${aws_sqs_queue.logging_dlq.arn}" ] },

wonboyn commented 3 years ago

Hey @bradmccoydev

The LoggingConsumer lambda is still configured with the role: SelfServiceLambdaExecutionRole Have you pushed the new role out? If not can you do this so I can test the permissions.

Cheers