From 093489830de4f60401b54bc16a3f3e382c9ece0a Mon Sep 17 00:00:00 2001
From: Daisuke <nakada0907@outlook.com>
Date: Sun, 4 Jan 2026 14:11:35 +0900
Subject: [PATCH] feat: add Lambda versioning and alias permissions to
 CloudFormation role

---
 roles/cloudformation-write-role.yaml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/roles/cloudformation-write-role.yaml b/roles/cloudformation-write-role.yaml
index 85a1ab8..a6df4c0 100644
--- a/roles/cloudformation-write-role.yaml
+++ b/roles/cloudformation-write-role.yaml
@@ -179,6 +179,11 @@ Resources:
                 Action:
                   - lambda:CreateFunction
                   - lambda:DeleteFunction
+                  - lambda:UpdateFunctionCode
+                  - lambda:PublishVersion
+                  - lambda:CreateAlias
+                  - lambda:UpdateAlias
+                  - lambda:DeleteAlias
                   - lambda:TagResource
                   - lambda:UntagResource
                   - lambda:AddPermission