tps-serverless-03.yml

# define IAM roles
  iamRoleStatements:
    - Effect: Allow
      Action:
        - s3:HeadObject
        - s3:GetObject
        - s3:GetObjectAcl
        - s3:PutObject
        - s3:PutObjectAcl
        - s3:CreateMultiPartUpload
      Resource:
        - arn:aws:s3:::${self:custom.s3.websiteBucket}/*
    - Effect: Allow
      Action:
        - dynamodb:*
      Resource:
        - !GetAtt transportPositionTable.Arn
        - !Join
            - ''
            - - !GetAtt transportPositionTable.Arn
              - '/index/TripDate-GSI'