Update the geo-tracking serverless pattern template.yml file to remov…

…e permission with * resources and add output for all lambda functions.
aws-samples · Oct 30, 2023 · 53db194 · 53db194
1 parent b8c5855
commit 53db194
Showing 1 changed file with 8 additions and 3 deletions.
diff --git a/geo-tracking-sam/template.yaml b/geo-tracking-sam/template.yaml
@@ -80,8 +80,11 @@ Resources:
           - Sid: GeoLocationTracking
             Effect: Allow
             Action:
-            - geo:*
-            Resource: '*'
+            - geo:GetDevicePosition
+            Resource: 
+            - !GetAtt DistanceFilteringTracker.Arn
+            - !GetAtt AccuracyFilteringTracker.Arn
+            - !GetAtt TimeFilteringTracker.Arn
         - DynamoDBCrudPolicy:
            TableName: !Ref MyDynamoDBTable        
       Environment:
@@ -101,8 +104,10 @@ Resources:
                   - geo.amazonaws.com
                 eventName:
                   - BatchUpdateDevicePosition
-
 Outputs:
+  TrackerFunction:
+    Description: "Tracking Testing Lambda Function ARN"
+    Value: !GetAtt TrackerFunction.Arn
   GeoTrackingFunction:
     Description: "Geo Tracking Lambda Function ARN"
     Value: !GetAtt GeoTrackingFunction.Arn