Droplr/serverless-api-cloudfront

Specify which additional IAM Policys are needed

adambrgmn opened this issue · 2 comments

adambrgmn commented

Hi, thanks for this plugin! Just what I need in order to build an image resizing
service to avoid invoking Lambdas on every request.

But I've run into an issue where my default IAM role didn't have permission to
create and list the resources necessary for this plugin.

So far I've used simple trial and error and determined four policys that needs
to be attatched to the the IAM role:

  • cloudfront:CreateDistribution
  • cloudfront:GetDistribution
  • cloudfront:UpdateDistribution
  • cloudfront:DeleteDistribution
  • cloudfront:TagResource

And that's compared to the policy statements recommended by Serverless,
found in this gist.

Maybe it should just be mentioned somewhere in the README.md and I'll be happy
to provide a PR.

Necromos commented

Hey! That sounds great!

If you are interested in preparing a PR, feel free to do so :)

If not, then I will add it to personal TODOs :)

adambrgmn commented

I'd be happy to provide a PR. I'll get it up tomorrow (European time here 😬).