nakada0907/daisuke-iam-infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(iam): allow cloudfront function updates

Browse source 
- grant CloudFront Function and invalidation permissions
This commit is contained in:
Daisuke Nakahara 2026-02-01 17:30:36 +09:00
parent b565fb3c4b
commit c31e4e36f7
1 changed files with 11 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

11
policies/cloudformation-write-policy.yaml
View file

@ -63,3 +63,14 @@ Resources:
Action: Action:
- s3:PutObject - s3:PutObject
Resource: "*" Resource: "*"
- Effect: Allow
Action:
- cloudfront:CreateFunction
- cloudfront:UpdateFunction
- cloudfront:PublishFunction
- cloudfront:DescribeFunction
- cloudfront:GetFunction
- cloudfront:DeleteFunction
- cloudfront:ListFunctions
- cloudfront:CreateInvalidation
Resource: "*"