search

splunk / splunk-aws-project-trumpet

MIT License
95 stars 31 forks source link

firehose lambda processor role did not include firehose:PutRecordBatch #26

Open dazhanghalo opened 3 years ago

dazhanghalo commented 3 years ago

after successfully deploying the CFT, i noticed the lambda processors in the firehose delivery stream were failing.

by simply adding this to the role it began succeeding.

AlDawoode commented 3 years ago

Easy step to fix the issue

After you generating the template, You just need to add on single line of code to the template as shown in the image :

image

what that code actually do " - !Ref VPCFirehoseProcessorRole " ? it mean add inline policy called "firehose_delivery_policy" to the Role that called "VPCFirehoseProcessorRole"

Note : if you already generated the template and run it in your account and faced the issue, then you can edit the template locally by adding the code described in the above image, then you can update your cloudformation stack by uploading the new updated template.