may actuakly be the vars context and not env

ServerlessOpsIO · Jan 30, 2025 · 69d454f · 69d454f
1 parent 7758f1b
commit 69d454f
Show file tree

Hide file tree

Showing 2 changed files with 22 additions and 2 deletions.
diff --git a/.github/workflows/main.yaml b/.github/workflows/main.yaml
@@ -78,5 +78,5 @@ jobs:
         with:
           aws_account_id: ${{ secrets.AWS_MANAGEMENT_ACCOUNT_ID }}
           template_file: packaged-template.yaml
-          env_json: ${{ toJson(env) }}
+          env_json: ${{ toJson(vars) }}
           secrets_json: ${{ toJson(secrets) }}
diff --git a/stacksets/cfn-event-producers/stackset.yaml b/stacksets/cfn-event-producers/stackset.yaml
@@ -23,4 +23,24 @@ Resources:
       State: "ENABLED"
       Targets:
         - Id: MonitoringBus
-          Arn: !Sub "arn:aws:events:${EventBusRegion}:${EventBusAccount}:event-bus/${EventBusName}"
+          Arn: !Sub "arn:aws:events:${EventBusRegion}:${EventBusAccount}:event-bus/${EventBusName}"
+          RoleArn: !GetAtt CfnEventsRole.Arn
+
+  CfnEventsRole:
+    Type: 'AWS::IAM::Role'
+    Properties:
+      AssumeRolePolicyDocument:
+        Version: '2012-10-17'
+        Statement:
+          - Effect: 'Allow'
+            Principal:
+              Service: 'events.amazonaws.com'
+            Action: 'sts:AssumeRole'
+      Policies:
+        - PolicyName: 'PutEventsPolicy'
+          PolicyDocument:
+            Version: '2012-10-17'
+            Statement:
+              - Effect: 'Allow'
+                Action: 'events:PutEvents'
+                Resource: !Sub "arn:aws:events:${EventBusRegion}:${EventBusAccount}:event-bus/${EventBusName}"