terrafying-components 1.14.9 → 1.14.10

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 249f77192ca5814a3b20f6c350f8b0a2b664eeb7a72fbad3047a564de3afaee7
-  data.tar.gz: b305722617445923ce5e2a3e89a8295c3db094e236a9e34f2dab05963b5956c0
+  metadata.gz: 96ab02163f59abbca33da70716d52b158df9b5bd82311babe7f895a754fbc7d3
+  data.tar.gz: 35012aee6747600bee403b48402fb4ef8e84b72f90cd9a6c390ee55d72adcf04
 SHA512:
-  metadata.gz: 46b03e2bc2ed2d0c4888f9887b614ca6b8d1d9578f73668a2502832ec5b4c1700762e7a9dcffe77c0a5a19936319e5567ce6ae073d785b2db97ca093740b2ee6
-  data.tar.gz: 6246f2827505bf5dda92c8c00537208523d2c4407bf52ba3feda12862dec5e24adaf799bec9e827133d9f0390a0d52342ab5067cc749ba50ae51738ffb457376
+  metadata.gz: 51290d391c153825fdc4def0660132722a0a9d632cce7bde8d9230201b608833338ca551e81ef2b71c9993eb6d6ac4a3bc7b4352ec9d9bce79d757fdc574ad49
+  data.tar.gz: 3540ebe6318ab64509011792d333ea48bfabb5eceb03f28e07d5f39ae0bc0b12959ec36e689ec4d2e9699f89dba28be8c49372eca74ca10a2e7fe1852235fcb4

data/lib/terrafying/components/letsencrypt.rb

@@ -234,7 +234,7 @@ module Terrafying
           s3_key: "certbot-lambda.zip",
           handler: "main.handler",
           runtime: "python3.7",
-          timeout: "300",
+          timeout: "900",
           role: "${aws_iam_role.#{@name}_lambda_execution.arn}",
           environment:{
             variables: {
@@ -263,8 +263,8 @@ module Terrafying
               )
             }
 
-        resource :aws_iam_policy, "#{@name}_lambda_s3", {
-          name: "#{@name}_lambda_s3",
+        resource :aws_iam_policy, "#{@name}_lambda_execution_policy", {
+          name: "#{@name}_lambda_execution_policy",
           description: "A policy for the #{@name}-lambda function to access S3",
           policy: JSON.pretty_generate(
                 {
@@ -304,7 +304,23 @@ module Terrafying
                     {
                       Action: [
                         "route53:ListHostedZones",
+                      ],
+                      Resource: [
+                        "*"
+                      ],
+                      Effect: "Allow"
+                    },
+                    {
+                      Action: [
                         "route53:GetChange",
+                      ],
+                      Resource: [
+                        "arn:aws:route53:::change/*"
+                      ],
+                      Effect: "Allow"
+                    },
+                    {
+                      Action: [
                         "route53:ChangeResourceRecordSets",
                       ],
                       Resource:
@@ -320,7 +336,7 @@ module Terrafying
 
         resource :aws_iam_role_policy_attachment, "#{@name}_lambda_policy_attachment", {
             role: "${aws_iam_role.#{@name}_lambda_execution.name}",
-            policy_arn: "${aws_iam_policy.#{@name}_lambda_s3.arn}"
+            policy_arn: "${aws_iam_policy.#{@name}_lambda_execution_policy.arn}"
             }
 
           self

data/lib/terrafying/components/version.rb

@@ -2,6 +2,6 @@
 
 module Terrafying
   module Components
-    VERSION = '1.14.9'
+    VERSION = '1.14.10'
   end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: terrafying-components
 version: !ruby/object:Gem::Version
-  version: 1.14.9
+  version: 1.14.10
 platform: ruby
 authors:
 - uSwitch Limited
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2019-12-18 00:00:00.000000000 Z
+date: 2019-12-19 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rake