fix(assetlibraryhistory): add kinesis permissions to lambda execution…

… role
aws · Sep 17, 2023 · b26183c · b26183c
1 parent 701db4d
commit b26183c
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/source/packages/services/assetlibraryhistory/infrastructure/cfn-assetLibraryHistory.yml b/source/packages/services/assetlibraryhistory/infrastructure/cfn-assetLibraryHistory.yml
@@ -184,10 +184,18 @@ Resources:
                   - 'dynamodb:PutItem'
                   - 'dynamodb:UpdateItem'
                   - 'dynamodb:DeleteItem'
+                  - 'kinesis:DescribeStream'
+                  - 'kinesis:DescribeStreamSummary'
+                  - 'kinesis:GetRecords'
+                  - 'kinesis:GetShardIterator'
+                  - 'kinesis:ListShards'
+                  - 'kinesis:ListStreams'
+                  - 'kinesis:SubscribeToShard'
                 Effect: Allow
                 Resource:
                   - !GetAtt HistoryTable.Arn
                   - !Sub '${HistoryTable.Arn}/index/type-time-index'
+                  - !GetAtt EventsKinesisStream.Arn
 
   RESTLambdaExecutionRole:
     Type: AWS::IAM::Role