serverless-iam-roles-per-function icon indicating copy to clipboard operation
serverless-iam-roles-per-function copied to clipboard

Conform to SLS v3 `iam` format?

Open henhal opened this issue 2 years ago • 1 comments

In earlier SLS versions, iamRoleStatements was the key used under provider to specify shared IAM role statements. In this plugin, the same syntax is used to define statements per function.

In SLS v3, iamRoleStatements was replaced by

iam:
  role:
   statements:

Any thoughts on following this syntax also for the per-function directives, such as

functions:
  MyFunction:
    iam:
      role:
        statementsInherit: true
        statements:
          - Effect: Allow
          - Action: dynamodb:*
          - Resource: xxxx

to support the other IAM related functionality now supported on the provider level such as managedPolicies, permissionsBoundary etc?

henhal avatar Apr 17 '23 06:04 henhal

FYI: this plugin is basically abandoned by the owner. Looks like it's been forked an is taking updates here https://github.com/andersquist/serverless-iam-roles-per-function

Victor-Learned avatar Apr 20 '23 17:04 Victor-Learned