I'm trying define an S3 bucket which has public access disabled, but my other defined Lambdas can access it. I keep receiving an error on deployment about "Invalid principal in policy". This is my resource definition... ResultsBucketPolicy: Type: AWS::S3::BucketPolicy Properties:…
I have a Gitlab pipeline that builds and deploys my SAM application. My application contains about 30 lambdas with mostly python and some node. I have never had an issue when I run sam build -u locally. But when running…
I have more than 10 lambdas. I am managing the infrastructure using sam template. I have defined Function resources for these lambdas. There are some common permissions required by these lambdas - cloudwatch, xray. Each lambda again require it's own…
I have Encrypted SNS topic with KMS key. Here is KMS policy: Type: 'AWS::KMS::Key' Properties: Description: Key for SNS Encryption Enabled: true EnableKeyRotation: true KeyPolicy: Version: 2012-10-17 Id: KmsKeyPolicy Statement: - Sid: AllowDFX5AdminPermissionSet Effect: Allow Principal: AWS: !Ref ParamKMSKeyAdministratorUserRoleArn Action:…
We are migrating our server-side operations from separate Lambda functions and an API managed in API Gateway, to a single SAM deployment. Users are registered anonymously in an existing Cognito Identity Pool and receive a token when they log in,…
After I run sam build for my application, I add a file (which needs to change on every deployment) to a lambda layer before running sam deploy. I can confirm that the file is created correctly in the right place,…
Can AWS Serverless Application Model (SAM) add new functions to an existing API Gateway resource imported via Fn::ImportValue function into the current stack?
I need create a way for execute especific lambdas for specific IAM users, then i am doing: I am creating a Usergroup in cloudformation: Resources: XXXGroup: Type: AWS::IAM::Group And after I am creating a policy and add the policy to…
Im tying to follow AWS tutorial for creating lambda function using sam cli It created the following yaml file # This is the SAM template that represents the architecture of your serverless application # https://docs.aws.amazon.com/serverless-application-model/latest/developerguide/serverless-sam-template-basics.html # The AWSTemplateFormatVersion identifies the…
I have the following SAM template: AWSTemplateFormatVersion: '2010-09-09' Transform: AWS::Serverless-2016-10-31 Description: > test lambda Globals: Function: Timeout: 3 Tracing: Active Api: TracingEnabled: True Resources: NotesFunction: Type: AWS::Serverless::Function Properties: PackageType: Zip CodeUri: notes/ Handler: app.lambdaHandler Runtime: nodejs18.x Policies: - AmazonDynamoDBFullAccess Architectures:…