ensuring rule table is updated if any of the deployed functions is th…

…e rule processor (airbnb#780) * ensuring rule table is updated if any of the deployed functions is the rule proc * adding permssion for glue:GetPartition to rule promo iam
jacknagz · Jul 2, 2018 · bbd3c38 · bbd3c38
1 parent d1b6b7a
commit bbd3c38
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 1 deletion.
diff --git a/stream_alert_cli/manage_lambda/deploy.py b/stream_alert_cli/manage_lambda/deploy.py
@@ -158,7 +158,7 @@ def deploy(options, config):
         deploy_targets.update(targets)
 
     # Update the rule table now if the rule processor is being deployed
-    if 'rule' in options.processor:
+    if 'rule' in processors:
         _update_rule_table(options, config)
 
     # Terraform applies the new package and publishes a new version

diff --git a/terraform/modules/tf_rule_promotion_iam/main.tf b/terraform/modules/tf_rule_promotion_iam/main.tf
@@ -54,6 +54,7 @@ data "aws_iam_policy_document" "rule_promotion_actions" {
       "athena:GetQueryExecution",
       "athena:GetQueryResults",
       "athena:StartQueryExecution",
+      "glue:GetPartition",
       "glue:GetPartitions",
       "glue:GetTable",
     ]