Skip to content
This repository has been archived by the owner on Jan 12, 2024. It is now read-only.

Commit

Permalink
Merge pull request #3 from Nike-Inc/lambda-doc-fixes
Browse files Browse the repository at this point in the history
Documentation fixes around policies
  • Loading branch information
fieldju authored Dec 14, 2016
2 parents bc86cf4 + db8af39 commit 7456d07
Showing 1 changed file with 25 additions and 15 deletions.
40 changes: 25 additions & 15 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -54,13 +54,18 @@ The following policy statement must also be assigned to the IAM role, so that th

``` json
{
"Sid": "allow-kms-decrypt",
"Effect": "Allow",
"Action": [
"kms:Decrypt"
],
"Resource": [
"*"
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowKMSDecrypt",
"Effect": "Allow",
"Action": [
"kms:Decrypt"
],
"Resource": [
"*"
]
}
]
}
```
Expand All @@ -73,21 +78,26 @@ The IAM role assigned to the Lambda function must contain the following policy s

``` json
{
"Sid": "allow-get-function-config",
"Effect": "Allow",
"Action": [
"lambda:GetFunctionConfiguration"
],
"Resource": [
"*"
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowGetFunctionConfig",
"Effect": "Allow",
"Action": [
"lambda:GetFunctionConfiguration"
],
"Resource": [
"*"
]
}
]
}
```

#### Configure the Client

``` java
final String invokedFunctionArn = context.getInvokedFunctionArn()
final String invokedFunctionArn = context.getInvokedFunctionArn();
final VaultClient vaultClient = DefaultCerberusClientFactory.getClientForLambda(invokedFunctionArn);
```

Expand Down

0 comments on commit 7456d07

Please sign in to comment.