aws-lambda-serverless-reference

aws-lambda-serverless-reference copied to clipboard

## OPTION 1: dogs - [ ] Add https://github.com/FormidableLabs/aws-lambda-dogs to this `LEARNING.md` as a place to review and try out. - [ ] Include instructions for creating a temporary branch,...

ryan-roemer

- [ ] LEARNING.md on what layers are, how they work at runtime (with locations), and maybe an exercise - [ ] Code comment additions too?

ryan-roemer

Lock down Terraform State

1

In spirit of [terraform-aws-serverless](https://github.com/FormidableLabs/terraform-aws-serverless) where you guys lock everything down as much as possible, how about changing [aws/bootstrap.yml](https://github.com/FormidableLabs/aws-lambda-serverless-reference/blob/master/aws/bootstrap.yml) to incorporate the limited restrictions needed for terraform: https://www.terraform.io/docs/backends/types/s3.html ### S3 Bucket...

CumpsD

Docs: Research aws-vault usage with instructions for MFA for IAM roles stuff.

2

Things like: ```sh $ STAGE=sandbox aws-vault exec -- yarn tf:service:apply ``` Will hit errors like: ``` 14 errors occurred: * module.serverless_vpc.aws_iam_policy.developer: 1 error occurred: * aws_iam_policy.developer: Error creating IAM policy...

ryan-roemer

Question - Is there an easy way to get authorized to perform: states:StartExecution?

1

Calling `stepfunctions.startExecution(params).promise()` from a express route/controller is giving me this exception: ``` { "message": "User: arn:aws:sts::3333333333:assumed-role/tf-ourservice-development-lambda-execution/sls-ourservice-development-api is not authorized to perform: states:StartExecution on resource: arn:aws:states:us-east-1:3333333333:stateMachine:generateCourse", "code": "AccessDeniedException", "time": "2019-09-27T15:44:01.864Z", "requestId":...

josoroma-zz