Allow gha to publish version and update alias (#11)

gweecl · web-flow · commit 7b82731a4f9e · 2023-06-14T09:50:21.000+08:00
diff --git a/data.tf b/data.tf
@@ -24,6 +24,10 @@ data "aws_iam_policy_document" "update_lambda" {
 
     actions = [
       "lambda:UpdateFunctionCode",
+      "lambda:UpdateFunctionConfiguration",
+      "lambda:UpdateAlias",
+      "lambda:PublishVersion",
+      "lambda:PublishLayerVersion"
     ]
     resources = ["arn:aws:lambda:${data.aws_region.current.name}:${data.aws_caller_identity.current.account_id}:function:${var.function_prefix}*"]
   }

Original file line number	Diff line number	Diff line change
`@@ -24,6 +24,10 @@ data "aws_iam_policy_document" "update_lambda" {`
`24`	`24`
`25`	`25`	`actions = [`
`26`	`26`	`"lambda:UpdateFunctionCode",`
	`27`	`+ "lambda:UpdateFunctionConfiguration",`
	`28`	`+ "lambda:UpdateAlias",`
	`29`	`+ "lambda:PublishVersion",`
	`30`	`+ "lambda:PublishLayerVersion"`
`27`	`31`	`]`
`28`	`32`	`resources = ["arn:aws:lambda:${data.aws_region.current.name}:${data.aws_caller_identity.current.account_id}:function:${var.function_prefix}*"]`
`29`	`33`	`}`