Terraform - Lambda 실행에 필요한 권한 추가

terraform/iam/policies/modules/policies.tf

@@ -21,6 +21,14 @@ resource "aws_iam_policy" "policy" {
           "ec2:Stop*"
         ],
         "Resource": "*"
+      },
+      {
+        "Sid": "Invoke",
+        "Effect": "Allow",
+        "Action": [
+            "lambda:InvokeFunction"
+        ],
+        "Resource": "*"
       }
     ]
   })

terraform/iam/users/variables.tf

@@ -9,8 +9,9 @@ variable "iam_users" {
   default = {
     dsk-devops = {
       policies = [
+        "arn:aws:iam::508259851457:policy/DSK_LambdaExecute",
         "arn:aws:iam::aws:policy/AmazonS3FullAccess",
-        "arn:aws:iam::aws:policy/AmazonEC2FullAccess"
+        "arn:aws:iam::aws:policy/AmazonEC2ReadOnlyAccess"        
       ]
     }
   }