Add S3 allow policy for football lambda

Author: marjisound

cdk/lib/__snapshots__/footballnotificationslambda.test.ts.snap

@@ -759,6 +759,11 @@ exports[`The FootballNotificationsLambda stack matches the snapshot for CODE 1`]
                 ],
               },
             },
+            {
+              "Action": "s3:GetObject",
+              "Effect": "Allow",
+              "Resource": "arn:aws:s3:::mobile-pa-football-data/*",
+            },
           ],
           "Version": "2012-10-17",
         },
@@ -1593,6 +1598,11 @@ exports[`The FootballNotificationsLambda stack matches the snapshot for PROD 1`]
                 ],
               },
             },
+            {
+              "Action": "s3:GetObject",
+              "Effect": "Allow",
+              "Resource": "arn:aws:s3:::mobile-pa-football-data/*",
+            },
           ],
           "Version": "2012-10-17",
         },

cdk/lib/footballnotificationslambda.ts

@@ -125,6 +125,14 @@ export class FootballNotificationsLambda extends GuStack {
 			}),
 		);
 
+		footballnotificationslambda.addToRolePolicy(
+			new PolicyStatement({
+				actions: ['s3:GetObject'],
+				effect: Effect.ALLOW,
+				resources: [`arn:aws:s3:::mobile-pa-football-data/*`],
+			}),
+		);
+
 		// Read Throttle Events Alarm
 		new GuAlarm(this, 'MobileNotificationsFootballConsumedReadThrottleEvents', {
 			app,