Dynamodb Streamのロールを追加

Kota8102 · May 18, 2024 · 387fe3e · 387fe3e
1 parent 1a2d837
commit 387fe3e
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/src/backend/lib/constructs/api.ts b/src/backend/lib/constructs/api.ts
@@ -182,6 +182,15 @@ export class ApiStack extends Construct {
       actions: ["ssm:GetParameter"],
       resources: ["*"],
     });
+    const dynamodbStreamPolicy = new cdk.aws_iam.PolicyStatement({
+      actions: [
+        "dynamodb:GetRecords",
+        "dynamodb:GetShardIterator",
+        "dynamodb:DescribeStream",
+        "dynamodb:ListStreams",
+      ],
+      resources: [table.tableArn],
+    });
     generativeAiLambdaRole.addToPolicy(ssmPolicy);
 
     new ssm.StringParameter(this, "openai-api-key", {