Skip to content

Commit

Permalink
fix(stepfunctions-tasks): mwaa service generates wrong action in role…
Browse files Browse the repository at this point in the history 
… policy (#28082)

When we use CallAwsService for Step Functions task, CDK generates IAM policy to grant permission regarding the API call. However, if we specify `mwaa` as service in CallAwsService, CDK generates wrong policy statement such as `mwaa:listEnvironments`. Correct service prefix for MWAA is `airflow`.

https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonmanagedworkflowsforapacheairflow.html
> Amazon Managed Workflows for Apache Airflow (service prefix: airflow) provides the following service-specific resources, actions, and condition context keys for use in IAM permission policies.

This PR solves the issue by adding `mwaa` into iamServiceMap. This is similar with #27623.

Closes #28081

----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*
  • Loading branch information
@tam0ri
tam0ri authored Dec 5, 2023
1 parent b23ee1b commit 24cbb51
Show file tree
Hide file tree
Showing 12 changed files with 35,202 additions and 0 deletions.
32 changes: 32 additions & 0 deletions ...eg.call-aws-service-mwaa.js.snapshot/IntegTestDefaultTestDeployAssertE3E7D2A4.assets.json
View file

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

Loading

0 comments on commit 24cbb51

Please sign in to comment.