Add lambda:UpdateFunctionCode to service role

triarius · triarius · commit 5a28c096187e · 2023-10-11T22:58:30.000+11:00
When upgrading a stack, and the version of the autoscaler lambda
changes, this permission is needed.
diff --git a/templates/service-role.yml b/templates/service-role.yml
@@ -182,7 +182,8 @@ Resources:
                 "lambda:DeleteFunction",
                 "lambda:InvokeFunction",
                 "lambda:TagResource",
-                "lambda:UpdateFunctionConfiguration"
+                "lambda:UpdateFunctionConfiguration",
+                "lambda:UpdateFunctionCode"
               ],
               "Resource": "arn:aws:lambda:*:*:function:*"
             },
