Setup infrastructure permissions to spawn new lambda from existing la…

…mbda
goadapp · Apr 12, 2017 · 5c7009c · 5c7009c
1 parent 73e4d99
commit 5c7009c
Showing 1 changed file with 16 additions and 7 deletions.
diff --git a/infrastructure/infrastructure.go b/infrastructure/infrastructure.go
@@ -202,13 +202,22 @@ func (infra *Infrastructure) createIAMLambdaRolePolicy(roleName string) error {
 		PolicyDocument: aws.String(`{
           "Version": "2012-10-17",
           "Statement": [
-            {
-              "Action": [
-                "sqs:SendMessage"
-              ],
-              "Effect": "Allow",
-              "Resource": "arn:aws:sqs:*:*:goad-*"
-		  	},
+					{
+				 "Action": [
+						 "sqs:SendMessage"
+				 ],
+				 "Effect": "Allow",
+				 "Resource": "arn:aws:sqs:*:*:goad-*"
+		 },
+		 {
+				 "Effect": "Allow",
+				 "Action": [
+						 "lambda:Invoke*"
+				 ],
+				 "Resource": [
+						 "arn:aws:lambda:*:*:goad:*"
+				 ]
+		 },
 			{
               "Action": [
                 "logs:CreateLogGroup",