For some reason, the second statement isn’t showing up in the IAM role at all:
functions:
searchIndexer:
handler: indexer.handler
name: ${self:provider.stage}-searchIndexer
description: Indexes things in Algolia
memorySize: 1024
timeout: 10
iamRoleStatements:
- Effect: Allow
Action:
- dynamodb:ListStreams
- dynamodb:DescribeStream
- dynamodb:GetShardIterator
- dynamodb:GetRecords
Resource:
Fn::GetAtt: [TracksTable, StreamArn]
- Effect: Allow
Action:
- dynamodb:UpdateItem
Resource:
Fn::GetAtt: [TracksTable, Arn]
I’m not getting any validation errors of any kind. But the statement is definitely not showing up in the role.