Skip to content

Commit 4e7ced1

Browse files
committed
AUT-5432: Grant frontend TaskRole DynamoDB access
1 parent 34a034f commit 4e7ced1

1 file changed

Lines changed: 12 additions & 0 deletions

File tree

cloudformation/deploy/template.yaml

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1417,6 +1417,18 @@ Resources:
14171417
- kms:GenerateDataKey*
14181418
- kms:DescribeKey
14191419
Resource: !GetAtt FrontendSessionsTableKmsKey.Arn
1420+
- PolicyName: AllowDynamoDbFrontendSessionAccess
1421+
PolicyDocument:
1422+
Version: "2012-10-17"
1423+
Statement:
1424+
- Effect: Allow
1425+
Action:
1426+
- dynamodb:GetItem
1427+
- dynamodb:PutItem
1428+
- dynamodb:UpdateItem
1429+
- dynamodb:DeleteItem
1430+
- dynamodb:DescribeTable
1431+
Resource: !GetAtt FrontendSessionsTable.Arn
14201432
PermissionsBoundary: !If
14211433
- UsePermissionsBoundary
14221434
- !Ref PermissionsBoundary

0 commit comments

Comments
 (0)