allow eventbridge scheduler to assume lambda role

rhyek · Apr 1, 2024 · 49bea60 · 49bea60
1 parent 3ac76a2
commit 49bea60
Showing 1 changed file with 5 additions and 2 deletions.
diff --git a/infra/modules/iam/main.tf b/infra/modules/iam/main.tf
@@ -1,8 +1,11 @@
 data "aws_iam_policy_document" "assume_role" {
   statement {
     principals {
-      type        = "Service"
-      identifiers = ["lambda.amazonaws.com"]
+      type = "Service"
+      identifiers = [
+        "lambda.amazonaws.com",
+        "scheduler.amazonaws.com" # for eventbridge scheduler to assume this role and exec the fn
+      ]
     }
     actions = ["sts:AssumeRole"]
     effect  = "Allow"