let CFN exec role subscribe to CFN CR topic

ServerlessOpsIO · Oct 26, 2024 · bb70eb1 · bb70eb1
1 parent b3c20c4
commit bb70eb1
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/stacksets/cfn-custom-resource-build/stackset.yaml b/stacksets/cfn-custom-resource-build/stackset.yaml
@@ -25,7 +25,10 @@ Resources:
           - Sid: AllowCloudFormation
             Effect: Allow
             Principal: "*"
-            Action: sns:Publish
+            Action:
+              - sns:Publish
+              - sns:Subscribe
+              - sns:Unsubscribe
             Resource: !Ref CustomResourceTopic
             Condition:
               StringEquals: