ApplicationCode/cfn/stageA/template.yaml [194:226]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
      Path: "/state-machine/"
      PolicyDocument:
        Version: "2012-10-17"
        Statement:
          # - Effect: Allow
          #   Action:
          #     - logs:*
          #   Resource: arn:aws:logs:*:*:*
          - Effect: Allow
            Action:
              - ssm:GetParameter*
            Resource: !Sub "arn:aws:ssm:${AWS::Region}:${AWS::AccountId}:parameter/DataLake/*"
          # - Effect: Allow
          #   Action:
          #     - s3:GetObject
          #     - s3:GetObjectVersion
          #     - s3:GetBucketVersioning
          #     - s3:ListBucket
          #   Resource:
          #     - !Sub "arn:aws:s3:::${pDatasetBucket}"
          - Effect: Allow
            Action:
              - "dynamodb:BatchGet*"
              - "dynamodb:DescribeTable"
              - "dynamodb:Get*"
              - "dynamodb:Query"
              - "dynamodb:Scan"
              - "dynamodb:BatchWrite*"
              - "dynamodb:DeleteItem"
              - "dynamodb:Update*"
              - "dynamodb:Put*"
            Resource:
              - !Sub "arn:aws:dynamodb:${AWS::Region}:${AWS::AccountId}:table/octagon-*"
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



ApplicationCode/cfn/stageA/template.yaml [320:344]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
      Path: "/state-machine/"
      PolicyDocument:
        Version: "2012-10-17"
        Statement:
          # - Effect: Allow
          #   Action:
          #     - logs:*
          #   Resource: arn:aws:logs:*:*:*
          - Effect: Allow
            Action:
              - ssm:GetParameter*
            Resource: !Sub "arn:aws:ssm:${AWS::Region}:${AWS::AccountId}:parameter/DataLake/*"
          - Effect: Allow
            Action:
              - "dynamodb:BatchGet*"
              - "dynamodb:DescribeTable"
              - "dynamodb:Get*"
              - "dynamodb:Query"
              - "dynamodb:Scan"
              - "dynamodb:BatchWrite*"
              - "dynamodb:DeleteItem"
              - "dynamodb:Update*"
              - "dynamodb:Put*"
            Resource:
              - !Sub "arn:aws:dynamodb:${AWS::Region}:${AWS::AccountId}:table/octagon-*"
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



