Skip to content

Instantly share code, notes, and snippets.

@velotiotech
Created September 8, 2021 09:45
Show Gist options
  • Save velotiotech/364a73d9e4fea61b121079690877d6de to your computer and use it in GitHub Desktop.
Save velotiotech/364a73d9e4fea61b121079690877d6de to your computer and use it in GitHub Desktop.
# you can add statements to the Lambda function's IAM Role here
iam:
role:
statements:
- Effect: "Allow"
Action:
- "s3:ListBucket"
Resource:
- arn:aws:s3:::your-temporary-bucket-name
- arn:aws:s3:::your-actual-photo-bucket-name
- Effect: "Allow"
Action:
- "s3:GetObject"
- "s3:DeleteObject"
Resource: arn:aws:s3:::your-temporary-bucket-name/*
- Effect: "Allow"
Action:
- "s3:PutObject"
Resource: arn:aws:s3:::your-actual-photo-bucket-name/*
- Effect: "Allow"
Action:
- "dynamodb:PutItem"
Resource:
- Fn::GetAtt: [ MetaDataDB, Arn ]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment