{"action":"closed","issue":{"url":"https://api.github.com/repos/Miserlou/Zappa/issues/181","repository_url":"https://api.github.com/repos/Miserlou/Zappa","labels_url":"https://api.github.com/repos/Miserlou/Zappa/issues/181/labels{/name}","comments_url":"https://api.github.com/repos/Miserlou/Zappa/issues/181/comments","events_url":"https://api.github.com/repos/Miserlou/Zappa/issues/181/events","html_url":"https://github.com/Miserlou/Zappa/issues/181","id":165167575,"number":181,"title":"permissions for calling AWS SNS APIs within a Zappa app","user":{"login":"dtenenba","id":2286826,"avatar_url":"https://avatars.githubusercontent.com/u/2286826?v=3","gravatar_id":"","url":"https://api.github.com/users/dtenenba","html_url":"https://github.com/dtenenba","followers_url":"https://api.github.com/users/dtenenba/followers","following_url":"https://api.github.com/users/dtenenba/following{/other_user}","gists_url":"https://api.github.com/users/dtenenba/gists{/gist_id}","starred_url":"https://api.github.com/users/dtenenba/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dtenenba/subscriptions","organizations_url":"https://api.github.com/users/dtenenba/orgs","repos_url":"https://api.github.com/users/dtenenba/repos","events_url":"https://api.github.com/users/dtenenba/events{/privacy}","received_events_url":"https://api.github.com/users/dtenenba/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":6,"created_at":"2016-07-12T20:04:30Z","updated_at":"2016-08-08T20:17:19Z","closed_at":"2016-08-08T20:17:19Z","body":"I have a Zappa app that uses boto3 to publish a message to an SNS topic. \r\nThis causes an error. Here's an excerpt from `zappa tail dev`, with some info elided:\r\n\r\n```\r\nClientError: An error occurred (AuthorizationError) when calling the Publish operation: \r\nUser: arn:aws:sts::XXX:assumed-role/ZappaLambdaExecution/awslambda_XXX is not authorized\r\nto perform: SNS:Publish on resource: arn:aws:sns:us-west-2:XXX:lambda-trigger-notifier\r\n```\r\n\r\nDoes Zappa look at my code to see which APIs I am calling and automatically configure the IAM user to have permission to call those APIs? If so, it does not seem to be working. If not, what is the recommended way to give the IAM role permission to call that API on that resource?\r\n\r\n"}}
{"actor":{"display_login":"Miserlou"}}