# Serverless iamRoleStatements Fn::Join in Resource

**URL:** <https://forum.serverless.com/t/serverless-iamrolestatements-fn-join-in-resource/15080>\
**Category:** Serverless Framework\
**Tags:** lambda\
**Created:** [May 21, 2021, 3:11pm UTC](https://forum.serverless.com/t/serverless-iamrolestatements-fn-join-in-resource/15080 "2021-05-21T15:11:18Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![anton-makarov-photob](https://yyz2.discourse-cdn.com/flex036/user_avatar/forum.serverless.com/anton-makarov-photob/32/5749_2.png) [@anton-makarov-photob](https://forum.serverless.com/u/anton-makarov-photob)\
**Post date:** [May 21, 2021, 3:11pm UTC](https://forum.serverless.com/t/serverless-iamrolestatements-fn-join-in-resource/15080/1 "2021-05-21T15:11:18Z")

</div>

serverless.ts

```
iamRoleStatements: [
  {
    Effect: 'Allow',
    Action: ['s3:PutObject', 's3:GetObject', 's3:DeleteObject'],
    // using GetAtt
    Resource: '"Fn::Join" : ["", [ { "Fn::GetAtt" : [ "s3Bucket", "Arn"] } , "/*" ] ]',
   // using Ref
    Resource: '"Fn::Join" : ["", [ "arn:aws:s3:::", { "Ref" : "s3Bucket" }, "/*"] ]',
  },
],
  resources: {
Resources: {
  s3Bucket: { ... }

```

We are getting the next error. When I tried deploying the same policies using serverless.YAML it’s working fine  
An error occurred: IamRoleLambdaExecution - Partition “” is not valid for resource “arn::Join” : [“”, [ “arn:aws:s3:::”, { “Ref” : “s3Bucket” }, “/\*”] ]".

---

<div class="post-metadata">

**Author:** ![anton-makarov-photob](https://yyz2.discourse-cdn.com/flex036/user_avatar/forum.serverless.com/anton-makarov-photob/32/5749_2.png) [@anton-makarov-photob](https://forum.serverless.com/u/anton-makarov-photob)\
**Post date:** [May 21, 2021, 3:47pm UTC](https://forum.serverless.com/t/serverless-iamrolestatements-fn-join-in-resource/15080/2 "2021-05-21T15:47:46Z")

</div>

```
    Resource: { 'Fn::Join': ['', [{ 'Fn::GetAtt': ['s3Bucket', 'Arn'] }, '/*']] },
```