feat(construct): added cdk nag for bad result

awslabs · Feb 25, 2025 · ef0633e · ef0633e
1 parent 202743e
commit ef0633e
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/src/patterns/gen-ai/aws-bedrock-data-automation/bda-results-lambda.ts b/src/patterns/gen-ai/aws-bedrock-data-automation/bda-results-lambda.ts
@@ -124,5 +124,14 @@ export class BdaResultsambda extends lambda.Function {
     if (this.role) {
       props.outputBucket.grantReadWrite(this.role);
     }
+
+    NagSuppressions.addResourceSuppressions(
+      role,
+      [{
+        id: 'AwsSolutions-IAM5',
+        reason: 'Lambda needs read access to process files from the input bucket',
+      }],
+      true,
+    );
   }
 }