really fix permissions

Author: anthony-nhs

packages/cdk/resources/VectorIndex.ts

@@ -71,21 +71,18 @@ export class VectorIndex extends Construct {
       }
     })
 
-    // const collectionArn = `arn:aws:aoss:${props.region}:${props.account}:collection/${props.collection.name}`
-    // eslint-disable-next-line max-len
-    // const indexArn = `arn:aws:aoss:${props.region}:${props.account}:index/${props.collection.name}/${props.indexName}`
+    const collectionArn = `arn:aws:aoss:${props.region}:${props.account}:collection/${props.collection.name}`
+    const indexArn = `arn:aws:aoss:${props.region}:${props.account}:index/${props.collection.name}/${props.indexName}`
 
-    const collectionArn = `arn:aws:aoss:${props.region}:${props.account}:collection/*`
-    const indexArn = `arn:aws:aoss:${props.region}:${props.account}:index/*`
     const getCollectionPolicy = new PolicyStatement({
       actions: [
-        "opensearchserverless:BatchGetCollection"
+        "aoss:BatchGetCollection"
       ],
       resources: [collectionArn]
     })
     const getIndexPolicy = new PolicyStatement({
       actions: [
-        "opensearchserverless:BatchGetIndex"
+        "aoss:BatchGetIndex"
       ],
       resources: [indexArn]
     })

packages/indexWaiter/index_waiter.py

@@ -8,9 +8,8 @@
 aoss = boto3.client("opensearchserverless")
 
 
-@logger.inject_lambda_context
+@logger.inject_lambda_context(log_event=True)
 def handler(event, context):
-    logger.info("Received event", extra={"event": event})
     request_type = event["RequestType"]
     collection_name = event["ResourceProperties"]["CollectionName"]
     index_name = event["ResourceProperties"]["IndexName"]