Place cdk nag suppression AFTER grantInvoke statement

umccr · Nov 2, 2024 · 7121cb4 · 7121cb4
1 parent e66a7c1
commit 7121cb4
Showing 1 changed file with 5 additions and 5 deletions.
diff --git a/...cstackface/glue-constructs/nails/part_2/cttso-v2-output-to-pieriandx-ready-event/index.ts b/...cstackface/glue-constructs/nails/part_2/cttso-v2-output-to-pieriandx-ready-event/index.ts
@@ -163,6 +163,11 @@ export class Cttsov2CompleteToPieriandxConstruct extends Construct {
     /*
     Handle lambda permissions
     */
+    props.redcapLambdaObj.grantInvoke(getDataFromRedCapPyLambdaObj.currentVersion);
+    getDataFromRedCapPyLambdaObj.addEnvironment(
+      'REDCAP_LAMBDA_FUNCTION_NAME',
+      props.redcapLambdaObj.functionName
+    );
     // FIXME - cannot get the 'current' version of an IFunction object
     NagSuppressions.addResourceSuppressions(
       getDataFromRedCapPyLambdaObj,
@@ -174,11 +179,6 @@ export class Cttsov2CompleteToPieriandxConstruct extends Construct {
       ],
       true
     );
-    props.redcapLambdaObj.grantInvoke(getDataFromRedCapPyLambdaObj.currentVersion);
-    getDataFromRedCapPyLambdaObj.addEnvironment(
-      'REDCAP_LAMBDA_FUNCTION_NAME',
-      props.redcapLambdaObj.functionName
-    );
 
     // Allow the getPieriandxDataFilesPyLambdaObj to read the secret
     props.icav2AccessTokenSecretObj.grantRead(getPieriandxDataFilesPyLambdaObj.currentVersion);