Merge pull request #46 from A-Hilaly/recommended-policy-arn

Scope the `iam:PassRole` in `recommened-inline-policy` to lambda service

Author: jaypipes

config/iam/recommended-inline-policy

@@ -6,10 +6,19 @@
             "Action": [
                 "lambda:*",
                 "s3:Get*",
-                "ecr:Get*",
-                "iam:PassRole"
+                "ecr:Get*"
             ],
             "Resource": "*"
+        },
+        {
+            "Action": "iam:PassRole",
+            "Condition": {
+              "StringEquals": {
+                "iam:PassedToService": "lambda.amazonaws.com"
+              }
+            },
+            "Effect": "Allow",
+            "Resource": "*"
         }
     ]
 }