@gradientedge/cdk-utils 5.10.0 → 5.11.0

package/dist/src/lib/manager/aws/iam-manager.d.ts

@@ -146,6 +146,11 @@ export declare class IamManager {
      * @param {string[]} resourceArns list of ARNs to allow access to
      */
     statementForReadTableItems(resourceArns?: string[]): cdk.aws_iam.PolicyStatement;
+    /**
+     * @summary Method to create iam statement to write items from dynamodb table
+     * @param {string[]} resourceArns list of ARNs to allow access to
+     */
+    statementForWriteTableItems(resourceArns?: string[]): cdk.aws_iam.PolicyStatement;
     /**
      * @summary Method to create iam statement for cloud trail
      * @param {string} id scoped id of the resource

package/dist/src/lib/manager/aws/iam-manager.js

@@ -337,6 +337,17 @@ class IamManager {
             resources: resourceArns ?? ['*'],
         });
     }
+    /**
+     * @summary Method to create iam statement to write items from dynamodb table
+     * @param {string[]} resourceArns list of ARNs to allow access to
+     */
+    statementForWriteTableItems(resourceArns) {
+        return new iam.PolicyStatement({
+            effect: iam.Effect.ALLOW,
+            actions: ['dynamodb:BatchWriteItem', 'dynamodb:DeleteItem', 'dynamodb:PutItem', 'dynamodb:UpdateItem'],
+            resources: resourceArns ?? ['*'],
+        });
+    }
     /**
      * @summary Method to create iam statement for cloud trail
      * @param {string} id scoped id of the resource

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gradientedge/cdk-utils",
-  "version": "5.10.0",
+  "version": "5.11.0",
   "description": "Utilities for AWS CDK provisioning",
   "main": "dist/index.js",
   "engines": {

package/src/lib/manager/aws/iam-manager.ts

@@ -343,6 +343,18 @@ export class IamManager {
     })
   }
 
+  /**
+   * @summary Method to create iam statement to write items from dynamodb table
+   * @param {string[]} resourceArns list of ARNs to allow access to
+   */
+  public statementForWriteTableItems(resourceArns?: string[]) {
+    return new iam.PolicyStatement({
+      effect: iam.Effect.ALLOW,
+      actions: ['dynamodb:BatchWriteItem', 'dynamodb:DeleteItem', 'dynamodb:PutItem', 'dynamodb:UpdateItem'],
+      resources: resourceArns ?? ['*'],
+    })
+  }
+
   /**
    * @summary Method to create iam statement for cloud trail
    * @param {string} id scoped id of the resource