apps/televisit-demo/backend/template.yaml [694:743]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    Type: AWS::IAM::Role
    Properties:
      AssumeRolePolicyDocument:
        Version: 2012-10-17
        Statement:
          - Action:
              - sts:AssumeRole
            Effect: Allow
            Principal:
              Service:
                - lambda.amazonaws.com
      Policies:
        - PolicyName: !Sub ${DemoName}-AuthLambdaLogPolicy
          PolicyDocument:
            Version: 2012-10-17
            Statement:
              - Action:
                  - logs:CreateLogGroup
                  - logs:CreateLogStream
                  - logs:PutLogEvents
                Effect: Allow
                Resource: '*'
        - PolicyName: !Sub ${DemoName}-AuthLambdaChimePolicy
          PolicyDocument:
            Version: '2012-10-17'
            Statement:
              - Effect: 'Allow'
                Action:
                  - 'chime:CreateAppInstanceUser'
                  - 'chime:CreateAppInstanceAdmin'
                  - 'chime:DescribeAppInstanceUser'
                  - 'chime:DescribeAppInstanceAdmin'
                Resource:
                  - !Join [
                      '',
                      [
                        !GetAtt TriggerChimeAppInstanceLambda.AppInstanceArn,
                        '/user/*',
                      ],
                    ]
        - PolicyName: !Sub ${DemoName}-MeetingLambdaChimePolicy
          PolicyDocument:
            Version: '2012-10-17'
            Statement:
              - Effect: 'Allow'
                Action:
                  - 'chime:describeChannel'
                  - 'chime:describeChannelMembership'
                  - 'chime:createMeeting'
                  - 'chime:createAttendee'
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



apps/televisit-demo/backend/template.yaml [1067:1116]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    Type: AWS::IAM::Role
    Properties:
      AssumeRolePolicyDocument:
        Version: 2012-10-17
        Statement:
          - Action:
              - sts:AssumeRole
            Effect: Allow
            Principal:
              Service:
                - lambda.amazonaws.com
      Policies:
        - PolicyName: !Sub ${DemoName}-AuthLambdaLogPolicy
          PolicyDocument:
            Version: 2012-10-17
            Statement:
              - Action:
                  - logs:CreateLogGroup
                  - logs:CreateLogStream
                  - logs:PutLogEvents
                Effect: Allow
                Resource: '*'
        - PolicyName: !Sub ${DemoName}-AuthLambdaChimePolicy
          PolicyDocument:
            Version: '2012-10-17'
            Statement:
              - Effect: 'Allow'
                Action:
                  - 'chime:CreateAppInstanceUser'
                  - 'chime:CreateAppInstanceAdmin'
                  - 'chime:DescribeAppInstanceUser'
                  - 'chime:DescribeAppInstanceAdmin'
                Resource:
                  - !Join [
                      '',
                      [
                        !GetAtt TriggerChimeAppInstanceLambda.AppInstanceArn,
                        '/user/*',
                      ],
                    ]
        - PolicyName: !Sub ${DemoName}-MeetingLambdaChimePolicy
          PolicyDocument:
            Version: '2012-10-17'
            Statement:
              - Effect: 'Allow'
                Action:
                  - 'chime:describeChannel'
                  - 'chime:describeChannelMembership'
                  - 'chime:createMeeting'
                  - 'chime:createAttendee'
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



