Merge pull request #38 from maael/fix/boundary-static-deploy

fix: 🐛 Add permission boundary to static deploy lambda

Author: ofhouse

main.tf

@@ -45,6 +45,7 @@ module "statics_deploy" {
   cloudfront_id            = module.proxy.cloudfront_id
   cloudfront_arn           = module.proxy.cloudfront_arn
   tags                     = var.tags
+  lambda_role_permissions_boundary = var.lambda_role_permissions_boundary
 }
 
 # Lambda

modules/statics-deploy/main.tf

@@ -168,6 +168,7 @@ module "deploy_trigger" {
   timeout       = 60
   publish       = true
   tags          = var.tags
+  role_permissions_boundary = var.lambda_role_permissions_boundary
 
   create_package         = false
   local_existing_package = module.lambda_content.abs_path

modules/statics-deploy/variables.tf

@@ -30,3 +30,8 @@ variable "tags" {
   type    = map(string)
   default = {}
 }
+
+variable "lambda_role_permissions_boundary" {
+  type    = string
+  default = null
+}