serverless-iam-roles-per-function - npm Package Compare versions

Comparing version 3.1.0 to 3.1.1-720dc0f

CHANGELOG.md

@@ -5,2 +5,9 @@ # Changelog
 
+### [3.1.1](https://github.com/functionalone/serverless-iam-roles-per-function/compare/v3.1.0...v3.1.1) (2021-01-03)
+
+
+### Bug Fixes
+
+* change PermissionsBoundary feature to add suport for cloudformation functions ([PR#70](https://github.com/functionalone/serverless-iam-roles-per-function/pull/70))
+
 ## [3.1.0](https://github.com/functionalone/serverless-iam-roles-per-function/compare/v3.0.2...v3.1.0) (2020-12-17)
@@ -11,3 +18,3 @@
 
-* Permission boundary [PR#68](https://github.com/functionalone/serverless-iam-roles-per-function/pull/68)
+* Permission boundary ([PR#68](https://github.com/functionalone/serverless-iam-roles-per-function/pull/68))
 
@@ -14,0 +21,0 @@ ## [3.0.2](https://github.com/functionalone/serverless-iam-roles-per-function/compare/v3.0.1...v3.0.2) (2020-12-04)

dist/lib/index.js

@@ -30,3 +30,3 @@ "use strict";
                             defaultInherit: { type: 'boolean' },
-                            iamGlobalPermissionsBoundary: { $ref: '#/definitions/awsArnString' },
+                            iamGlobalPermissionsBoundary: { $ref: '#/definitions/awsArn' },
                         },
@@ -45,3 +45,3 @@ additionalProperties: false,
                         iamRoleStatementsName: { type: 'string' },
-                        iamPermissionsBoundary: { $ref: '#/definitions/awsArnString' },
+                        iamPermissionsBoundary: { $ref: '#/definitions/awsArn' },
                         iamRoleStatements: { $ref: '#/definitions/awsIamPolicyStatements' },
@@ -335,10 +335,6 @@ },
         if (iamPermissionsBoundary || iamGlobalPermissionsBoundary) {
-            functionIamRole.Properties.PermissionsBoundary = {
-                'Fn::Sub': iamPermissionsBoundary || iamGlobalPermissionsBoundary,
-            };
+            functionIamRole.Properties.PermissionsBoundary = iamPermissionsBoundary || iamGlobalPermissionsBoundary;
         }
         if (iamGlobalPermissionsBoundary) {
-            globalIamRole.Properties.PermissionsBoundary = {
-                'Fn::Sub': iamGlobalPermissionsBoundary,
-            };
+            globalIamRole.Properties.PermissionsBoundary = iamGlobalPermissionsBoundary;
         }
@@ -345,0 +341,0 @@ functionIamRole.Properties.RoleName = functionObject.iamRoleStatementsName

package.json

 {
   "name": "serverless-iam-roles-per-function",
   "private": false,
-  "version": "3.1.0",
+  "version": "3.1.1-720dc0f",
   "engines": {
@@ -93,2 +93,2 @@ "node": ">=10"
   }
-}
+}

README.md

@@ -128,3 +128,3 @@ # Serverless IAM Roles Per Function Plugin
 
-## Permissions boundaries
+## PermissionsBoundary
 
@@ -137,3 +137,3 @@ Define iamPermissionsBoundary definitions at the function level:
     handler: handler.get
-    iamPermissionsBoundary: arn:aws:iam::xxxxx:policy/your_permissions_boundary_policy
+    iamPermissionsBoundary: !Sub arn:aws:iam::xxxxx:policy/your_permissions_boundary_policy
     iamRoleStatementsName: my-custom-role-name 
@@ -153,3 +153,3 @@ iamRoleStatements:
   serverless-iam-roles-per-function:
-    iamGlobalPermissionsBoundary: arn:aws:iam::xxxx:policy/permissions-boundary-policy
+    iamGlobalPermissionsBoundary: !Sub arn:aws:iam::xxxx:policy/permissions-boundary-policy
 ```
@@ -156,0 +156,0 @@

src/lib/index.ts

@@ -43,3 +43,3 @@ import _ from 'lodash';
               defaultInherit: { type: 'boolean' },
-              iamGlobalPermissionsBoundary: { $ref: '#/definitions/awsArnString' },
+              iamGlobalPermissionsBoundary: { $ref: '#/definitions/awsArn' },
             },
@@ -59,3 +59,3 @@ additionalProperties: false,
             iamRoleStatementsName: { type: 'string' },
-            iamPermissionsBoundary: { $ref: '#/definitions/awsArnString' },
+            iamPermissionsBoundary: { $ref: '#/definitions/awsArn' },
             iamRoleStatements: { $ref: '#/definitions/awsIamPolicyStatements' },
@@ -367,11 +367,7 @@ },
     if (iamPermissionsBoundary || iamGlobalPermissionsBoundary) {
-      functionIamRole.Properties.PermissionsBoundary = {
-        'Fn::Sub': iamPermissionsBoundary || iamGlobalPermissionsBoundary,
-      }
+      functionIamRole.Properties.PermissionsBoundary = iamPermissionsBoundary || iamGlobalPermissionsBoundary;
     }
 
     if (iamGlobalPermissionsBoundary) {
-      globalIamRole.Properties.PermissionsBoundary = {
-        'Fn::Sub': iamGlobalPermissionsBoundary,
-      }
+      globalIamRole.Properties.PermissionsBoundary = iamGlobalPermissionsBoundary;
     }
@@ -378,0 +374,0 @@

src/test/funcs-with-iam.json

@@ -113,3 +113,5 @@ {
       "iamRoleStatements": [],
-      "iamPermissionsBoundary": "arn:aws:iam::xxxxx:policy/your_permissions_boundary_policy",
+      "iamPermissionsBoundary": {
+        "Fn::Sub": "arn:aws:iam::xxxxx:policy/your_permissions_boundary_policy"
+      },
       "events": [],
@@ -116,0 +118,0 @@ "name": "test-permissions-boundary-hello",

src/test/index.test.ts

@@ -432,3 +432,5 @@ import {assert} from 'chai';
         serverless.service.custom['serverless-iam-roles-per-function'] = {
-          iamGlobalPermissionsBoundary: 'arn:aws:iam::xxxxx:policy/permissions_boundary',
+          iamGlobalPermissionsBoundary: {
+            'Fn::Sub': 'arn:aws:iam::xxxxx:policy/permissions_boundary',
+          },
         };
@@ -435,0 +437,0 @@ plugin.createRolesPerFunction();

New alerts

No v1

Quality

Package is not semver >=1. This means it is not stable and does not support ^ ranges.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

90772

increased by0.19%

Worsened metrics

Lines of code

1407

decreased by-0.28%

Number of low quality alerts

2

increased by100%

No dependency changes