add event bus policy for channel manager

Author: marjisound

cdk/lib/__snapshots__/liveactivities.test.ts.snap

@@ -834,6 +834,26 @@ exports[`The LiveActivities stack matches the snapshot for CODE 1`] = `
                 ],
               },
             },
+            {
+              "Action": "events:PutEvents",
+              "Effect": "Allow",
+              "Resource": {
+                "Fn::Join": [
+                  "",
+                  [
+                    "arn:aws:events:",
+                    {
+                      "Ref": "AWS::Region",
+                    },
+                    ":",
+                    {
+                      "Ref": "AWS::AccountId",
+                    },
+                    ":event-bus/liveactivities-eventbus-CODE",
+                  ],
+                ],
+              },
+            },
           ],
           "Version": "2012-10-17",
         },

cdk/lib/liveactivities.ts

@@ -78,6 +78,15 @@ export class LiveActivities extends GuStack {
 			}),
 		);
 
+		channelLambda.addToRolePolicy(
+			new PolicyStatement({
+				actions: ['events:PutEvents'],
+				resources: [
+					`arn:aws:events:${region}:${account}:event-bus/${app}-eventbus-${stage}`,
+				],
+			}),
+		);
+
 		const broadcastDlq = new Queue(this, 'BroadcastDlq', {
 			queueName: `${app}-broadcast-dlq-${stage}`,
 			visibilityTimeout: Duration.minutes(4),