Skip to content

v0.97.0

Latest
Compare
Choose a tag to compare
@cloudposse-releaser cloudposse-releaser released this 10 Mar 18:34
8334f18

🚀 Enhancements

feat: Add support for custom Lambda@Edge policies @jwadolowski (#333) ## what

Execution role associated with Lambda@Edge comes with a hardcoded policy that enables write access to CloudWatch logs. This PR adds support for additional policies. It was implemented in a similar fashion to additional_bucket_policy from the parent module.

why

It's a fairly common situation that a Lambda@Edge function needs access to other AWS services/resources than CloudWatch logs. aws_lambda_function's role argument expects a single role ARN, therefore the only reasonable option is to append new policy statements to the IAM role created in scope of this module.

references

closes #261