fix: Msk Tests Failure due to Missing Permissions (#3443)

Author: GavinZZ

integration/combination/test_function_with_msk.py

@@ -7,6 +7,10 @@
 from integration.helpers.resource import current_region_does_not_support, generate_suffix
 
 
+# Mark this test suite as nonblocking tests since MSK Cluster creation can take
+# up to 30 minutes according to https://docs.aws.amazon.com/msk/latest/developerguide/troubleshooting.html#troubleshooting-cluster-stuck
+# This would cause the test to fail due to MSK Cluster did not stablize.
+# We should investigate any other cause of failures.
 @skipIf(current_region_does_not_support([MSK]), "MSK is not supported in this testing region")
 @nonblocking
 class TestFunctionWithMsk(BaseTest):

integration/resources/templates/combination/function_with_msk_trigger_and_s3_onfailure_events_destinations.yaml

@@ -24,7 +24,7 @@ Resources:
           - Action: [kafka:DescribeCluster, kafka:GetBootstrapBrokers, ec2:CreateNetworkInterface,
               ec2:DescribeNetworkInterfaces, ec2:DescribeVpcs, ec2:DeleteNetworkInterface,
               ec2:DescribeSubnets, ec2:DescribeSecurityGroups, logs:CreateLogGroup,
-              logs:CreateLogStream, logs:PutLogEvents]
+              logs:CreateLogStream, logs:PutLogEvents, s3:ListBucket]
             Effect: Allow
             Resource: '*'
       ManagedPolicyArns: [arn:aws:iam::aws:policy/service-role/AWSLambdaBasicExecutionRole]