Skip to content

Commit

Permalink
fix(stepfunctions-tasks): mediapackagevod service generates wrong act…
Browse files Browse the repository at this point in the history 
…ion in role policy (#28775)

When we use CallAwsService for Step Functions task, CDK generates IAM policy to grant permission regarding the API call. However, if we specify `mediapackagevod` as service in CallAwsService, CDK generates wrong policy statement such as `mediapackagevod:deleteAsset`. Correct service prefix for MediaPackageVOD is `mediapackage-vod`.

https://docs.aws.amazon.com/service-authorization/latest/reference/list_awselementalmediapackagevod.html

> Amazon MediaPackageVOD (service prefix: mediapackage-vod) provides the following service-specific resources, actions, and condition context keys for use in IAM permission policies.

This PR solves the issue by adding mediapackagevod into iamServiceMap. This is similar with #27623 and #28082.

Closes #28774.

----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*
  • Loading branch information
@SankyRed
Nicolas Vaquero authored and SankyRed committed Feb 8, 2024
1 parent 133e399 commit 648ca4e
Show file tree
Hide file tree
Showing 12 changed files with 35,398 additions and 0 deletions.
32 changes: 32 additions & 0 deletions ...-service-mediapackagevod.js.snapshot/IntegTestDefaultTestDeployAssertE3E7D2A4.assets.json
View file

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

Loading

0 comments on commit 648ca4e

Please sign in to comment.