add missing schema registry table permissions

SmdhMdep · Aug 22, 2024 · a06d9ea · a06d9ea
1 parent 61efa82
commit a06d9ea
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/serverless.yml b/serverless.yml
@@ -60,6 +60,9 @@ provider:
           Resource:
             - !Sub arn:aws:iot:${self:custom.dotenv.FLEET_INDEX_IOT_REGION_NAME}:${AWS::AccountId}:index/AWS_Things
             - !Sub arn:aws:dynamodb:${self:custom.dotenv.DEVICE_LEDGER_TABLE_REGION}:${AWS::AccountId}:table/${self:custom.dotenv.DEVICE_LEDGER_TABLE_NAME}
+            - !Sub arn:aws:dynamodb:${self:custom.dotenv.DEVICE_LEDGER_TABLE_REGION}:${AWS::AccountId}:table/${self:custom.dotenv.DEVICE_LEDGER_TABLE_NAME}/index/*
+            - !Sub arn:aws:dynamodb:${self:custom.dotenv.SCHEMA_REGISTRY_TABLE_REGION}:${AWS::AccountId}:table/${self:custom.dotenv.SCHEMA_REGISTRY_TABLE_NAME}
+            - !Sub arn:aws:dynamodb:${self:custom.dotenv.SCHEMA_REGISTRY_TABLE_REGION}:${AWS::AccountId}:table/${self:custom.dotenv.SCHEMA_REGISTRY_TABLE_NAME}/index/*
             - arn:aws:s3:::${self:custom.dotenv.STREAM_DATA_BUCKET_NAME}
             - arn:aws:s3:::${self:custom.dotenv.STREAM_DATA_BUCKET_NAME}/*
         # Managed resources