Allow cloudfront create invalidation

passportxyz · Sep 30, 2024 · 279b895 · 279b895
1 parent 6d81e4f
commit 279b895
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/infra/aws/index.ts b/infra/aws/index.ts
@@ -634,6 +634,14 @@ const serviceTaskRole = new aws.iam.Role("scorer-service-task-role", {
               ],
               Resource: "*",
             },
+            // CloudFront 
+            {
+              Effect: "Allow",
+              Action: [
+                "cloudfront:CreateInvalidation",
+              ],
+              Resource: "*",
+            },
           ],
         })
       ),