chore: update policy

Signed-off-by: Adetokunbo Ige <[email protected]>

Author: Adetokunbo Ige

todo-app/__main__.py

@@ -57,9 +57,10 @@
     }
 )
 
-# Define IAM policy for DynamoDB access
-dynamodb_scan_policy = aws.iam.Policy(
+# 3. Create DynamoDB policy
+dynamodb_policy = aws.iam.Policy(
     "dynamodb-policy",
+    name=f"dynamodb-policy-{environment}",
     description="Policy for DynamoDB access",
     policy=pulumi.Output.json_dumps({
         "Version": "2012-10-17",
@@ -75,18 +76,19 @@
                     "dynamodb:Query"
                 ],
                 "Resource": [
-                    pulumi.Output.format("{}",dynamodb_table.arn),
-                    pulumi.Output.format("{}/*",dynamodb_table.arn)  # Include index access
+                    dynamodb_table.arn,
+                    pulumi.Output.concat(dynamodb_table.arn, "/*")
                 ]
             }
         ]
     })
 )
 
-# Attach the policy to the Lambda execution role
-role_policy_attachment = aws.iam.RolePolicyAttachment("lambda-role-policy-attachment",
+# 4. IMPORTANT: Attach the policy to the role
+lambda_dynamodb_policy_attachment = aws.iam.RolePolicyAttachment(
+    "lambda-dynamodb-policy-attachment",
     role=lambda_role.name,
-    policy_arn=dynamodb_scan_policy.arn
+    policy_arn=dynamodb_policy.arn
 )
 
 # Create a Lambda function using the Docker image