I have setup a newWebSocket as follows:
alertSocketHandler:
handler: src/handler.alertSocketHandler
memorySize: 512
timeout : 30
events:
- websocket:
route: $connect
- websocket:
route: $disconnect
- websocket:
route: $default
and have permission defined as follows:
resources:
Resources:
AWSLambdaVPCAccessExecutionRole:
Type: AWS::IAM::ManagedPolicy
Properties:
Description: Creating policy for vpc connetion.
Roles:
- {“Ref” : “IamRoleLambdaExecution”}
PolicyDocument:
Version: ‘2012-10-17’
Statement:
- Effect: Allow
Action:
- ec2:CreateNetworkInterface
- ec2:DescribeNetworkInterfaces
- ec2:DeleteNetworkInterface
- cloudwatch:PutMetricData
- execute-api:ManageConnections
Resource: “*”
I am getting this error when I try to connect to the socket:
Lambda execution failed with status 200 due to customer function error: User: arn:aws:iam::xxxxxxxxxxxx:user/nodeapp is not authorized to perform: execute-api:ManageConnections on resource: arn:aws:execute-api:eu-west-1:********2038:xxxxxxxxxx/prod/POST/@connections/{connectionId}
Can anyone tell me why execute-api:ManageConnections for resource * above is not being picked up?