chore: update policy

Signed-off-by: Adetokunbo Ige <[email protected]>

Author: Adetokunbo Ige

todo-app/__main__.py

@@ -34,18 +34,30 @@
     policy_arn="arn:aws:iam::aws:policy/service-role/AWSLambdaBasicExecutionRole"
 )
 
-# Define an IAM policy that allows DynamoDB scan action
-dynamodb_scan_policy = aws.iam.Policy("dynamodb-policy",
-    policy={
+# Define IAM policy for DynamoDB access
+dynamodb_policy = aws.iam.Policy(
+    "dynamodb-policy",
+    description="Policy for DynamoDB access",
+    policy=pulumi.Output.json_dumps({
         "Version": "2012-10-17",
         "Statement": [
             {
                 "Effect": "Allow",
-                "Action": "dynamodb:Scan",
-                "Resource": "arn:aws:dynamodb:us-east-1:289940214902:table/todo-dev-*"
+                "Action": [
+                    "dynamodb:Scan",
+                    "dynamodb:PutItem",
+                    "dynamodb:GetItem",
+                    "dynamodb:UpdateItem",
+                    "dynamodb:DeleteItem",
+                    "dynamodb:Query"
+                ],
+                "Resource": [
+                    pulumi.Output.format("{}",dynamodb_table.arn),
+                    pulumi.Output.format("{}/*",dynamodb_table.arn)  # Include index access
+                ]
             }
         ]
-    }
+    })
 )
 
 # Attach the policy to the Lambda execution role
@@ -55,22 +67,25 @@
 )
 
 # Define a DynamoDB table
-dynamodb_table = aws.dynamodb.Table(f"todo-{environment}",
-    hash_key="id",  # Partition key
-    range_key="timestamp",  # Sort key
+# Define DynamoDB Table
+dynamodb_table = aws.dynamodb.Table(
+    f"todo-{environment}",
+    name=f"todo-{environment}",  # Explicit table name
+    hash_key="id",
+    range_key="timestamp",
     attributes=[
         aws.dynamodb.TableAttributeArgs(
             name="id",
-            type="S"  # S for string
+            type="S"
         ),
         aws.dynamodb.TableAttributeArgs(
             name="timestamp",
-            type="N"  # N for number
+            type="N"
         ),
     ],
-    billing_mode="PAY_PER_REQUEST",  # Use on-demand mode (no provisioned throughput)
+    billing_mode="PAY_PER_REQUEST",
     tags={
-        "Environment": "dev",
+        "Environment": environment,
         "Created_By": "Pulumi"
     }
 )