feat: add StepFunctionsCallbackPolicy policy template (#3545)

Co-authored-by: Mohamed Elasmar <[email protected]>

Author: jdg2896

samtranslator/policy_templates_data/policy_templates.json

@@ -2329,6 +2329,36 @@
       "Description": "Gives access permissions to create and list applications in the AWS Serverless Application Repository service",
       "Parameters": {}
     },
+    "StepFunctionsCallbackPolicy": {
+      "Definition": {
+        "Statement": [
+          {
+            "Action": [
+              "states:SendTaskFailure",
+              "states:SendTaskHeartbeat",
+              "states:SendTaskSuccess"
+            ],
+            "Effect": "Allow",
+            "Resource": {
+              "Fn::Sub": [
+                "arn:${AWS::Partition}:states:${AWS::Region}:${AWS::AccountId}:stateMachine:${stateMachineName}",
+                {
+                  "stateMachineName": {
+                    "Ref": "StateMachineName"
+                  }
+                }
+              ]
+            }
+          }
+        ]
+      },
+      "Description": "Gives permission to implement callback tasks in Step Functions",
+      "Parameters": {
+        "StateMachineName": {
+          "Description": "The name of the state machine to execute."
+        }
+      }
+    },
     "StepFunctionsExecutionPolicy": {
       "Definition": {
         "Statement": [

tests/translator/input/all_policy_templates.yaml

@@ -184,3 +184,6 @@ Resources:
       - SESBulkTemplatedCrudPolicy_v2:
           IdentityName: name
           TemplateName: template_name
+
+      - StepFunctionsCallbackPolicy:
+          StateMachineName: name

tests/translator/output/all_policy_templates.json

@@ -1703,6 +1703,29 @@
               ]
             },
             "PolicyName": "KitchenSinkFunctionRolePolicy62"
+          },
+          {
+            "PolicyDocument": {
+              "Statement": [
+                {
+                  "Action": [
+                    "states:SendTaskFailure",
+                    "states:SendTaskHeartbeat",
+                    "states:SendTaskSuccess"
+                  ],
+                  "Effect": "Allow",
+                  "Resource": {
+                    "Fn::Sub": [
+                      "arn:${AWS::Partition}:states:${AWS::Region}:${AWS::AccountId}:stateMachine:${stateMachineName}",
+                      {
+                        "stateMachineName": "name"
+                      }
+                    ]
+                  }
+                }
+              ]
+            },
+            "PolicyName": "KitchenSinkFunctionRolePolicy63"
           }
         ],
         "Tags": [

tests/translator/output/aws-cn/all_policy_templates.json

@@ -1703,6 +1703,29 @@
               ]
             },
             "PolicyName": "KitchenSinkFunctionRolePolicy62"
+          },
+          {
+            "PolicyDocument": {
+              "Statement": [
+                {
+                  "Action": [
+                    "states:SendTaskFailure",
+                    "states:SendTaskHeartbeat",
+                    "states:SendTaskSuccess"
+                  ],
+                  "Effect": "Allow",
+                  "Resource": {
+                    "Fn::Sub": [
+                      "arn:${AWS::Partition}:states:${AWS::Region}:${AWS::AccountId}:stateMachine:${stateMachineName}",
+                      {
+                        "stateMachineName": "name"
+                      }
+                    ]
+                  }
+                }
+              ]
+            },
+            "PolicyName": "KitchenSinkFunctionRolePolicy63"
           }
         ],
         "Tags": [

tests/translator/output/aws-us-gov/all_policy_templates.json

@@ -1703,6 +1703,29 @@
               ]
             },
             "PolicyName": "KitchenSinkFunctionRolePolicy62"
+          },
+          {
+            "PolicyDocument": {
+              "Statement": [
+                {
+                  "Action": [
+                    "states:SendTaskFailure",
+                    "states:SendTaskHeartbeat",
+                    "states:SendTaskSuccess"
+                  ],
+                  "Effect": "Allow",
+                  "Resource": {
+                    "Fn::Sub": [
+                      "arn:${AWS::Partition}:states:${AWS::Region}:${AWS::AccountId}:stateMachine:${stateMachineName}",
+                      {
+                        "stateMachineName": "name"
+                      }
+                    ]
+                  }
+                }
+              ]
+            },
+            "PolicyName": "KitchenSinkFunctionRolePolicy63"
           }
         ],
         "Tags": [