add lambda:ListTags to allow the deploy user to access tag information

aligent · Oct 1, 2024 · 1c5e3a7 · 1c5e3a7
1 parent d233fab
commit 1c5e3a7
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/packages/serverless-deploy-iam/bin/app.ts b/packages/serverless-deploy-iam/bin/app.ts
@@ -471,7 +471,7 @@ export class ServiceDeployIAM extends cdk.Stack {
           name: "LAMBDA",
           prefix: `arn:aws:lambda:${region}:${accountId}:function:`,
           qualifiers: [`${serviceName}*`],
-          actions: ["lambda:GetFunction", "lambda:InvokeFunction"],
+          actions: ["lambda:GetFunction", "lambda:InvokeFunction", "lambda:ListTags"],
         },
         {
           name: "IAM",