Skip to content

Instantly share code, notes, and snippets.

@alsmola
Last active May 8, 2022 22:22
Show Gist options
  • Save alsmola/2bf6e16a33a86cc54df32cd4bb577d51 to your computer and use it in GitHub Desktop.
Save alsmola/2bf6e16a33a86cc54df32cd4bb577d51 to your computer and use it in GitHub Desktop.
Permissions for IAM deploy role
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": [
"signer:GetSigningProfile",
"signer:PutSigningProfile"
]
"Resource": "arn:aws:signer:us-east-1:[account-number]:/signing-profiles/[signing-profile-name]"
},
{
"Effect": "Allow",
"Action": [
"lambda:GetCodeSigningConfig",
"lambda:PutFunctionCodeSigningConfig",
"lambda:UpdateCodeSigningConfig"
],
"Resource": "arn:aws:lambda:us-east-1:[account-number]:code-signing-config:csc-[csc-id]"
},
{
"Effect": "Allow",
"Action": [
"lambda:AddPermission",
"lambda:CreateFunction",
"lambda:GetFunction",
"lambda:GetFunctionCodeSigningConfig",
"lambda:ListTags",
"lambda:ListVersionsByFunction",
"lambda:PublishVersion",
"lambda:PutFunctionCodeSigningConfig",
"lambda:UpdateFunctionCode"
],
"Resource": "arn:aws:lambda:us-east-1:[account-number]:function:[function-name]"
}
]
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment