fix: CDS-1756 reduce permissions to region/account scope

coralogix · Dec 31, 2024 · 07ec4c8 · 07ec4c8
1 parent 1003660
commit 07ec4c8
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/template.yaml b/template.yaml
@@ -1193,7 +1193,7 @@ Resources:
           - lambda:UpdateEventSourceMapping
           - lambda:GetFunctionConfiguration
           - lambda:UpdateFunctionConfiguration
-          Resource: '*'
+          Resource: !Sub arn:aws:lambda:${AWS::Region}:${AWS::AccountId}:function:*
       - Statement:
         - Sid: S3NotificationPolicy
           Effect: Allow