{"action":"closed","issue":{"url":"https://api.github.com/repos/functionalone/serverless-iam-roles-per-function/issues/5","repository_url":"https://api.github.com/repos/functionalone/serverless-iam-roles-per-function","labels_url":"https://api.github.com/repos/functionalone/serverless-iam-roles-per-function/issues/5/labels{/name}","comments_url":"https://api.github.com/repos/functionalone/serverless-iam-roles-per-function/issues/5/comments","events_url":"https://api.github.com/repos/functionalone/serverless-iam-roles-per-function/issues/5/events","html_url":"https://github.com/functionalone/serverless-iam-roles-per-function/issues/5","id":299972594,"number":5,"title":"\"The provided execution role does not have permissions to call Publish on SNS.\"","user":{"login":"theburningmonk","id":546969,"avatar_url":"https://avatars3.githubusercontent.com/u/546969?v=4","gravatar_id":"","url":"https://api.github.com/users/theburningmonk","html_url":"https://github.com/theburningmonk","followers_url":"https://api.github.com/users/theburningmonk/followers","following_url":"https://api.github.com/users/theburningmonk/following{/other_user}","gists_url":"https://api.github.com/users/theburningmonk/gists{/gist_id}","starred_url":"https://api.github.com/users/theburningmonk/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/theburningmonk/subscriptions","organizations_url":"https://api.github.com/users/theburningmonk/orgs","repos_url":"https://api.github.com/users/theburningmonk/repos","events_url":"https://api.github.com/users/theburningmonk/events{/privacy}","received_events_url":"https://api.github.com/users/theburningmonk/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":4,"created_at":"2018-02-24T21:03:36Z","updated_at":"2018-02-25T11:34:04Z","closed_at":"2018-02-25T11:34:04Z","author_association":"NONE","body":"Hi ya, ran into another error as I try to integrate this plugin into the demo app I'm building for my course, which has API, Kinesis and SNS functions.\r\n\r\nAs you can see in [this commit](https://github.com/theburningmonk/manning-aws-lambda-in-motion/commit/6df8557b23051eb44e583ad0230e7758275a65a1), I'm moving everything over to per-function roles, but when I run `sls deploy` I get an error from CloudFormation saying `An error occurred: RetryDashnotifyDashuserLambdaFunction - The provided execution role does not have permissions to callPublish on SNS.`\r\n\r\nI have looked at the CF template SLS generates, and the role does include the `sns:Publish` permission.\r\n![image](https://user-images.githubusercontent.com/546969/36634882-7a9df28a-19a3-11e8-96e8-2202e6963b2d.png)\r\n\r\nIf I do the following then it works:\r\n\r\n1. comment out the two SNS functions' `iamRoleStatements` so they use the default `IamRoleLambdaExecution` role that SLS generates, but leave all the other functions with their per-function IAM roles\r\n2. deploy\r\n3. uncomment the two SNS functions' `iamRoleStatements`\r\n4. deploy\r\n\r\nBased on the above, it feels like there's some race condition with creating these SNS functions, but I can't quite put my finger on what yet. Thoughts?"}}
{"actor":{"display_login":"glicht"}}