BDB-701-Moving-From-Transactional-to-Stateful-Batch-Processing/template.yml [1027:1049]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
                - Fn::GetAtt: [ StatefulArtifactBucket, Arn ]
                - {"Fn::Sub": "arn:aws:s3:::stateful-artifacts-${AWS::AccountId}/*"}
            Version: '2012-10-17'
          PolicyName: lambdaRoleActions
        - PolicyDocument:
            Statement:
            - Action:
              - 'elasticache:DescribeReplicationGroups'
              Effect: Allow
              Resource: "*"
            Version: '2012-10-17'
          PolicyName: lambdaRoleElastiCache
        - PolicyDocument:
            Statement:
            - Action:
              - 'ec2:CreateNetworkInterface'
              - 'ec2:DescribeNetworkInterfaces'
              - 'ec2:DeleteNetworkInterface'
              Effect: Allow
              Resource: "*"
            Version: '2012-10-17'
          PolicyName: lambdaRoleVPC
    Type: AWS::IAM::Role
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



BDB-701-Moving-From-Transactional-to-Stateful-Batch-Processing/template.yml [1076:1098]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
                - Fn::GetAtt: [ StatefulArtifactBucket, Arn ]
                - {"Fn::Sub": "arn:aws:s3:::stateful-artifacts-${AWS::AccountId}/*"}
            Version: '2012-10-17'
          PolicyName: lambdaRoleActions
        - PolicyDocument:
            Statement:
            - Action:
              - 'elasticache:DescribeReplicationGroups'
              Effect: Allow
              Resource: "*"
            Version: '2012-10-17'
          PolicyName: lambdaRoleElastiCache
        - PolicyDocument:
            Statement:
            - Action:
              - 'ec2:CreateNetworkInterface'
              - 'ec2:DescribeNetworkInterfaces'
              - 'ec2:DeleteNetworkInterface'
              Effect: Allow
              Resource: "*"
            Version: '2012-10-17'
          PolicyName: lambdaRoleVPC
    Type: AWS::IAM::Role
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



