permissions for cloudformation

Author: anthony-nhs

packages/cdk/resources/RuntimePolicies.ts

@@ -132,6 +132,15 @@ export class RuntimePolicies extends Construct {
         "kms:GenerateDataKey*",
         "kms:DescribeKey"
       ],
+      resources: [
+        `arn:aws:cloudformation:eu-west-2:${props.account}:stack/epsam-pr-*`
+      ]
+    })
+
+    const slackBotDescribeCfStacks = new PolicyStatement({
+      actions: [
+        "cloudformation:DescribeStacks"
+      ],
       resources: [props.slackBotStateTableKmsKeyArn]
     })
 
@@ -145,7 +154,8 @@ export class RuntimePolicies extends Construct {
         slackBotLambdaPolicy,
         slackBotGuardrailPolicy,
         slackBotDynamoDbPolicy,
-        slackBotKmsPolicy
+        slackBotKmsPolicy,
+        slackBotDescribeCfStacks
       ]
     })