search

cloudtools / awacs

Python library for AWS Access Policy Language creation
BSD 2-Clause "Simplified" License
395 stars 102 forks source link

Generated policies are missing some dynamo Actions #90

Closed pdex closed 6 years ago

pdex commented 6 years ago

It appears that the policies.js bundle that's being parsed to generate the .py files is missing some dynamo actions. Specifically dynamodb:DescribeTimeToLive and dynamodb:UpdateTimeToLive.

This page appears to be missing UpdateTimeToLive https://docs.aws.amazon.com/IAM/latest/UserGuide/list_dynamodb.html

This page maybe has the most correct set of references? https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/api-permissions-reference.html

It might make sense for the gen.py process to reconcile the policies.js source against some of the html documentation. I'd be willing to take a crack at that with a pull request if you're interested.

markpeek commented 6 years ago

I just pushed an override to include those into the generated dynamodb file. Give it a look and see if that works for you.

pdex commented 6 years ago

LGTM 👍