fix issue #62 and updates for release v1.3.1

Author: knihit

CHANGELOG.md

@@ -5,6 +5,12 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.3.1] - 2024-02-26
+
+### Fixed
+
+-   Add missing IAM action required to provision users for use cases when deploying through deployment dashboard
+
 ## [1.3.0] - 2024-02-22
 
 ### Added

source/infrastructure/lib/s3web/static-site.ts

@@ -129,6 +129,10 @@ export class StaticWebsite extends Construct {
         });
 
         this.webS3Bucket.policy?.node.addDependency(cloudfrontToS3.cloudFrontWebDistribution);
+        cloudfrontToS3.cloudFrontLoggingBucket?.node
+            .tryFindChild('Policy')
+            ?.node.tryFindChild('Resource')
+            ?.node?.addDependency(cloudfrontToS3.cloudFrontLoggingBucket);
 
         const bucketPolicyUpdateCustomResource = new cdk.CustomResource(this, 'UpdateBucketPolicy', {
             resourceType: 'Custom::UpdateBucketPolicy',

source/infrastructure/lib/use-case-management/management-stack.ts

@@ -696,7 +696,8 @@ const buildCfnDeployRole = (scope: Construct): iam.Role => {
                             'cognito-idp:AdminRemoveUserFromGroup',
                             'cognito-idp:AdminListGroupsForUser',
                             'cognito-idp:SetUserPoolMfaConfig',
-                            'cognito-idp:DeleteUserPool'
+                            'cognito-idp:DeleteUserPool',
+                            'cognito-idp:AdminGetUser'
                         ],
                         resources: [
                             `arn:${cdk.Aws.PARTITION}:cognito-idp:${cdk.Aws.REGION}:${cdk.Aws.ACCOUNT_ID}:userpool/*`

source/infrastructure/test/use-case-management/management-stack.test.ts

@@ -735,7 +735,8 @@ describe('When creating a use case management Stack', () => {
                                     'cognito-idp:AdminRemoveUserFromGroup',
                                     'cognito-idp:AdminListGroupsForUser',
                                     'cognito-idp:SetUserPoolMfaConfig',
-                                    'cognito-idp:DeleteUserPool'
+                                    'cognito-idp:DeleteUserPool',
+                                    'cognito-idp:AdminGetUser'
                                 ],
                                 Condition: {
                                     'ForAnyValue:StringEquals': {