add Cognito access instead of excessive permission

aligent · Dec 4, 2023 · 0a4a1b0 · 0a4a1b0
1 parent 1ed55ca
commit 0a4a1b0
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/packages/serverless-deploy-iam/bin/app.ts b/packages/serverless-deploy-iam/bin/app.ts
@@ -175,7 +175,7 @@ export class ServiceDeployIAM extends cdk.Stack {
                     {
                          name: 'IAM',
                          prefix: `arn:aws:iam::${accountId}:role`,
-                         qualifiers: [`*${serviceName}*`],
+                         qualifiers: [`${serviceName}*`, `Cognito-${serviceName}*`],
                          actions: [
                               "iam:CreateRole",
                               "iam:PassRole",