fix test

Author: anthony-nhs

packages/cdkConstructs/src/constructs/TypescriptLambdaFunction.ts

@@ -106,8 +106,10 @@ const getDefaultLambdaOptions = (
  * This construct creates:
  * - A Lambda function with TypeScript bundling
  * - CloudWatch log group with KMS encryption
+ * - Managed IAM policy for writing logs
  * - IAM role for execution with necessary permissions
  * - Subscription filter on logs so they are forwarded to splunk
+ * - Managed IAM policy for invoking the Lambda function
  *
  * It also
  * - attaches the Lambda Insights layer for monitoring.

packages/cdkConstructs/tests/functionConstruct.test.ts

@@ -106,8 +106,7 @@ describe("functionConstruct works correctly", () => {
       },
       "ManagedPolicyArns": Match.arrayWith([
         {"Fn::ImportValue": "lambda-resources:LambdaInsightsLogGroupPolicy"},
-        {"Fn::ImportValue": "account-resources:CloudwatchEncryptionKMSPolicyArn"},
-        {"Fn::ImportValue": "account-resources:LambdaDecryptSecretsKMSPolicy"}
+        {"Fn::ImportValue": "account-resources:CloudwatchEncryptionKMSPolicyArn"}
       ])
     })
   })
@@ -214,7 +213,6 @@ describe("functionConstruct works correctly with additional policies", () => {
       "ManagedPolicyArns": Match.arrayWith([
         {"Fn::ImportValue": "lambda-resources:LambdaInsightsLogGroupPolicy"},
         {"Fn::ImportValue": "account-resources:CloudwatchEncryptionKMSPolicyArn"},
-        {"Fn::ImportValue": "account-resources:LambdaDecryptSecretsKMSPolicy"},
         {Ref: testPolicyResource.Ref}
       ])
     })