You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Is your request related to a new offering from AWS?
No, this relates to an existing offering.
Is your request related to a problem? Please describe.
I would like it to be easier to use service integrations that require events permissions. E.g. the step functions integration. Without setting the proper events permissions, you will get an error similar to this: Error: AccessDeniedException: 'arn:aws:iam::xxxx:role/step-functions-role' is not authorized to create managed-rule.. This has caused prior issues like #11 (which was also related to other permissions issues addressed in #19 and #24).
Describe the solution you'd like.
Add the relevant default_resources to each events block inside the aws_service_policies such that users can write events = true for services that require these permissions.
Custom resources must be allowed, if the requires it.
Describe alternatives you've considered.
Currently, users must write out the full resources for the events permissions. This works, but it is verbose and repetitive.
Additional context
The text was updated successfully, but these errors were encountered:
This issue has been automatically marked as stale because it has been open 30 days
with no activity. Remove stale label or comment or this issue will be closed in 10 days
I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues. If you have found a problem that seems similar to this, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.
Is your request related to a new offering from AWS?
No, this relates to an existing offering.
Is your request related to a problem? Please describe.
I would like it to be easier to use service integrations that require
events
permissions. E.g. the step functions integration. Without setting the proper events permissions, you will get an error similar to this:Error: AccessDeniedException: 'arn:aws:iam::xxxx:role/step-functions-role' is not authorized to create managed-rule.
. This has caused prior issues like #11 (which was also related to other permissions issues addressed in #19 and #24).Describe the solution you'd like.
Add the relevant
default_resources
to eachevents
block inside theaws_service_policies
such that users can writeevents = true
for services that require these permissions.Custom resources must be allowed, if the requires it.
Describe alternatives you've considered.
Currently, users must write out the full resources for the
events
permissions. This works, but it is verbose and repetitive.Additional context
The text was updated successfully, but these errors were encountered: