feautre: remove extra permissions from DB dal (#897)

ran-isenberg · Nov 10, 2024 · b6495db · b6495db
1 parent 3b01fde
commit b6495db
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/cdk/service/api_construct.py b/cdk/service/api_construct.py
@@ -76,7 +76,7 @@ def _build_lambda_role(self, db: dynamodb.TableV2, idempotency_table: dynamodb.T
                 'dynamodb_db': iam.PolicyDocument(
                     statements=[
                         iam.PolicyStatement(
-                            actions=['dynamodb:PutItem', 'dynamodb:GetItem'],
+                            actions=['dynamodb:PutItem'],
                             resources=[db.table_arn],
                             effect=iam.Effect.ALLOW,
                         )