Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix: Don't duplicate PolicyDocument statement for stream events (#12313) #12320

Open
wants to merge 1 commit into
base: v3
Choose a base branch
from

Commits on Jan 4, 2024

  1. fix: Don't duplicate PolicyDocument statement for stream events (serv…

    …erless#12313)
    
    Each function consuming a stream event would emit its own PolicyDocument
    statement. This statement would contain a list of actions that doesn't
    change between functions. For DynamoDB streams the list is:
    
    ```
    "Action": [
        "dynamodb:GetRecords",
        "dynamodb:GetShardIterator",
        "dynamodb:DescribeStream",
        "dynamodb:ListStreams"
    ],
    ```
    
    Duplicating these for each function causes the IAM policy to exceed the
    AWS limit after about 30 functions.
    
    The resource names are still duplicated, if they happen to be the same.
    tibbe committed Jan 4, 2024
    Configuration menu
    Copy the full SHA
    f81b4b5 View commit details
    Browse the repository at this point in the history