serverless-operations
diff --git a/‎lib/deploy/stepFunctions/compileIamRole.js‎
Lines changed: 2 additions & 0 deletions b/‎lib/deploy/stepFunctions/compileIamRole.js‎
Lines changed: 2 additions & 0 deletions
@@ -666,6 +666,8 @@ function getS3ObjectPermissions(action, state) {
  {
  action: 's3:Get*',
  resource: resolveS3BucketReferences(bucket, [
+ // The bucket variable is not interpolated here, or below,
+ // but inside resolveS3BucketReferences() to also handle intrinsics
  'arn:aws:s3:::${bucket}',
  'arn:aws:s3:::${bucket}/*',
  ]),
Original file line number	Diff line number	Diff line change
`@@ -666,6 +666,8 @@ function getS3ObjectPermissions(action, state) {`
`666`	`666`	`{`
`667`	`667`	`action: 's3:Get*',`
`668`	`668`	`resource: resolveS3BucketReferences(bucket, [`
	`669`	`+ // The bucket variable is not interpolated here, or below,`
	`670`	`+ // but inside resolveS3BucketReferences() to also handle intrinsics`
`669`	`671`	`'arn:aws:s3:::${bucket}',`
`670`	`672`	`'arn:aws:s3:::${bucket}/*',`
`671`	`673`	`]),`