From c80e81a196b8d2c168475f1122a1505130577bad Mon Sep 17 00:00:00 2001 From: Samuel Williams Date: Mon, 25 Nov 2024 13:20:34 +0000 Subject: [PATCH 1/2] Allow store to write to assessment-import-queue --- .../addons/assessment-import-queue.yml | 29 +++++++++++++++++++ 1 file changed, 29 insertions(+) create mode 100644 copilot/fsd-application-store/addons/assessment-import-queue.yml diff --git a/copilot/fsd-application-store/addons/assessment-import-queue.yml b/copilot/fsd-application-store/addons/assessment-import-queue.yml new file mode 100644 index 00000000..f5522a1f --- /dev/null +++ b/copilot/fsd-application-store/addons/assessment-import-queue.yml @@ -0,0 +1,29 @@ +Parameters: + App: + Type: String + Description: Your application's name. + Env: + Type: String + Description: The environment name your service, job, or workflow is being deployed to. + Name: + Type: String + Description: The name of the service, job, or workflow being deployed. + +Resources: + AssessmentImportQueuePolicy: + Type: AWS::IAM::ManagedPolicy + Properties: + PolicyDocument: + Version: "2012-10-17" + Statement: + - Sid: AssessmentImportQueuePolicy + Effect: Allow + Action: + - sqs:SendMessage + Resource: + - Fn::ImportValue: !Sub ${App}-${Env}-AssessmentImportQueueArn + +Outputs: + AssessmentImportQueuePolicyArn: + Description: "The ARN of the ManagedPolicy to attach to the task role." + Value: !Ref AssessmentImportQueuePolicy From d843638f45912e2828d24ac7c472f2140dc1d11e Mon Sep 17 00:00:00 2001 From: Samuel Williams Date: Mon, 25 Nov 2024 16:11:35 +0000 Subject: [PATCH 2/2] Allow writing to notification queue --- .../addons/notification-queue-policy.yml | 29 +++++++++++++++++++ 1 file changed, 29 insertions(+) create mode 100644 copilot/fsd-application-store/addons/notification-queue-policy.yml diff --git a/copilot/fsd-application-store/addons/notification-queue-policy.yml b/copilot/fsd-application-store/addons/notification-queue-policy.yml new file mode 100644 index 00000000..b609e782 --- /dev/null +++ b/copilot/fsd-application-store/addons/notification-queue-policy.yml @@ -0,0 +1,29 @@ +Parameters: + App: + Type: String + Description: Your application's name. + Env: + Type: String + Description: The environment name your service, job, or workflow is being deployed to. + Name: + Type: String + Description: The name of the service, job, or workflow being deployed. + +Resources: + NotificationQueuePolicy: + Type: AWS::IAM::ManagedPolicy + Properties: + PolicyDocument: + Version: "2012-10-17" + Statement: + - Sid: NotificationQueuePolicy + Effect: Allow + Action: + - sqs:SendMessage + Resource: + - Fn::ImportValue: !Sub ${App}-${Env}-NotificationQueueArn + +Outputs: + NotificationQueuePolicyArn: + Description: "The ARN of the ManagedPolicy to attach to the task role." + Value: !Ref NotificationQueuePolicy