grant permissions to trigger lambda

hms-dbmi-cellenics · Jul 12, 2022 · 66f5ae9 · 66f5ae9
1 parent 0d37a34
commit 66f5ae9
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/src/sql/migrations/20220704130411_add_delete_sample_file_trigger.js b/src/sql/migrations/20220704130411_add_delete_sample_file_trigger.js
@@ -50,6 +50,11 @@ exports.up = async (knex) => {
     throw new Error('Environment variables AWS_REGION and AWS_ACCOUNT_ID are required');
   }
 
+  await knex.raw(`
+    GRANT USAGE ON SCHEMA aws_lambda TO api_role;
+    GRANT EXECUTE ON ALL FUNCTIONS IN SCHEMA aws_lambda TO api_role;
+  `);
+
   await knex.raw(createDeleteSampleFileTriggerFunc(process.env.NODE_ENV));
 };