https://pulumi.com
Join Slack
This message was deleted.
# python
s
This message was deleted.
b
Any reasons you're not using json.dumps?
Also, you don't appear to have used an apply, that's gonna cause issues
f
I am using 
json.dumps(POLICY)
b
There are examples in github.com/pulumi/examples
Yeah but you're building with an f string rather than an object
f
If I do
Copy code
# Custom API-Tasks ECS Role Policy
        self.api_tasks_ecs_permissions = iam.RolePolicy(
            resource_name="api-tasks-ecs-permissions",
            role=self.api_tasks_ecs_role.id,
            policy=json.dumps({
                "Version": "2012-10-17",
                "Statement": [
                    {
                        "Action": [
                            "ssm:GetParameters"
                        ],
                        "Resource": [
                            f"arn:aws:ssm:{aws_region}:{aws_account}:parameter/{env_stack}.api.config-location-s3"
                        ],
                        "Effect": "Allow"
                    }
                ]
            })
        )
It errors with:
Copy code
Error putting IAM role policy api-tasks-ecs-permissions-e425b0b: MalformedPolicyDocument: The policy failed legacy parsing
I don’t see an example of using dynamic resources in an IAM Policy in http://github.com/pulumi/examples, I just checked all the python examples
Copy code
POLICY = {
            "Version": "2012-10-17",
            "Statement": [
                {
                    "Action": [
                        "ssm:GetParameters"
                    ],
                    "Resource": [
                        "arn:aws:ssm:" + aws_region + ":" + aws_account +
                        ":parameter/" + env_stack + ".api.config-location-s3"
                    ],
                    "Effect": "Allow"
                }
            ]
        }

        # Custom API-Tasks ECS Role Policy
        self.api_tasks_ecs_permissions = iam.RolePolicy(
            resource_name="api-tasks-ecs-permissions",
            role=self.api_tasks_ecs_role.id,
            policy=json.dumps(POLICY)
        )
Gets
Copy code
TypeError: can only concatenate str (not "AwaitableGetRegionResult") to str
ohh…. 
aws_region = aws.get_region()
, it doesn’t return string, my bad Forgot the 
.name
57 Views
Open in Slack
PreviousNext
Powered by

Pulumi Community

No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.

Powered by