-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathsetup-deployment.yaml
41 lines (36 loc) · 1.03 KB
/
setup-deployment.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
AWSTemplateFormatVersion: "2010-09-09"
Description: ""
Parameters:
BucketName:
Description: S3 Bucket name where lambda packages will be deployed
Type: String
Default: argomi-upload-deployment
Resources:
Bucket:
Type: AWS::S3::Bucket
Properties:
BucketName: !Ref BucketName
LambdaDeploymentRole:
Type: AWS::IAM::Role
Properties:
RoleName: lambda_deployment
AssumeRolePolicyDocument:
Version: '2012-10-17'
Statement:
- Effect: Allow
Principal: {Service: [lambda.amazonaws.com]}
Action: ['sts:AssumeRole']
Path: /
ManagedPolicyArns:
- "arn:aws:iam::aws:policy/service-role/AWSLambdaBasicExecutionRole"
Policies:
- PolicyName: S3Policy
PolicyDocument:
Version: '2012-10-17'
Statement:
- Effect: Allow
Action:
- 's3:PutObject'
- 's3:DeleteObject'
- 's3:GetObject'
Resource: !Sub "arn:aws:s3:::${BucketName}/*"