Add prop to pass IAM policies to build project.

aws4embeddedlinux · Jan 4, 2024 · 70c0fb6 · 70c0fb6
1 parent 15aa7c5
commit 70c0fb6
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/lib/embedded-linux-pipeline.ts b/lib/embedded-linux-pipeline.ts
@@ -48,6 +48,8 @@ export interface EmbeddedLinuxPipelineProps extends cdk.StackProps {
   readonly projectKind?: ProjectKind;
   /** A name for the layer-repo that is created. Default is 'layer-repo' */
   readonly layerRepoName?: string;
+  /** Additional policy statements to add to the build project. */
+  readonly buildPolicyAdditions?: iam.PolicyStatement[];
 }
 
 /**
@@ -199,6 +201,10 @@ export class EmbeddedLinuxPipelineStack extends cdk.Stack {
       },
     });
 
+    if (props.buildPolicyAdditions) {
+      props.buildPolicyAdditions.map(p => project.addToRolePolicy(p))
+    }
+
     if (props.projectKind && props.projectKind == ProjectKind.PokyAmi) {
       outputBucket.grantReadWrite(project);
       project.addToRolePolicy(this.addVMExportPolicy());