https://pulumi.com
Join Slack
This message was deleted.
# typescript
s
This message was deleted.
a
In the docs, I only see examples of 
Resource: '*'
but I don’t want that. And I think the arn is not resolved at the time of execution for the Policy. Is this correct?
m
Your output isn't applied which results in a malformed JSON document
what is 
Action: [DBAction.Put]
?
I think you have to apply 
confirmUserIamRolePolicy
's arn
Also, you might using interpolate instead.
Copy code
pulumi.interpolate`${usersTable.arn}`,
fwiw, here's an example of something similar I have:
Copy code
new aws.iam.RolePolicyAttachment(
  `${appName}-lambda-role-attachment`,
  {
    role: applicationRole,
    policyArn: new aws.iam.Policy(`${appName}-lambda-policy`, {
      policy: {
        Version: "2012-10-17",
        Statement: [
          {
            Sid: "DynamoDBCrud",
            Effect: "Allow",
            Action: [
              "dynamodb:GetItem",
              "dynamodb:DeleteItem",
              "dynamodb:PutItem",
              "dynamodb:Scan",
              "dynamodb:Query",
              "dynamodb:UpdateItem",
              "dynamodb:BatchWriteItem",
              "dynamodb:BatchGetItem",
              "dynamodb:DescribeTable",
              "dynamodb:ConditionCheckItem",
            ],
            Resource: [
              pulumi.interpolate`${eventTransactionsDdbTableArn}`,
              pulumi.interpolate`${eventTransactionsDdbTableArn}/index/*`,
            ]
🙌 1
a
Perfect! Thank you very much!
Open in Slack
PreviousNext
Powered by

Pulumi Community

No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.

Powered by