fix(aws-stepfunctions-tasks): fix execution role permissions

aws · Aug 31, 2020 · b6b9456 · b6b9456
1 parent 3f80ae6
commit b6b9456
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 1 deletion.
diff --git a/packages/@aws-cdk/aws-stepfunctions-tasks/lib/codebuild/start-build.ts b/packages/@aws-cdk/aws-stepfunctions-tasks/lib/codebuild/start-build.ts
@@ -60,6 +60,8 @@ export class CodeBuildStartBuild extends sfn.TaskStateBase {
         actions: [
           'codebuild:StartBuild',
           'codebuild:StopBuild',
+          'codebuild:BatchGetBuilds',
+          'codebuild:BatchGetReports',
         ],
       }),
     ];

diff --git a/packages/@aws-cdk/aws-stepfunctions-tasks/test/codebuild/integ.start-build.expected.json b/packages/@aws-cdk/aws-stepfunctions-tasks/test/codebuild/integ.start-build.expected.json
@@ -191,7 +191,9 @@
             {
               "Action": [
                 "codebuild:StartBuild",
-                "codebuild:StopBuild"
+                "codebuild:StopBuild",
+                "codebuild:BatchGetBuilds",
+                "codebuild:BatchGetReports"
               ],
               "Effect": "Allow",
               "Resource": {