developmentseed / developmentseed/eoapi-cdk

Make use of the data access role for the tiler permissions instead of a bucket list

Open
#52 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Python
Stars
29
Forks
6
Avg merge
1d 2h
Merged PRs (30d)
7

Description

Right now, the titiler pgstac construct has a `buckets` parameter, and this list of buckets is added to the lambda execution role at deployment time.

This is inconsistent with how we handle permissions for the ingestor lambda : we require the user to provide the ARN of a pre-existing 'data access role'.

Because the ingestor and the titiler lambdas will be accessing the same assets, it makes sense to configure these lambdas with the same permissions.

Handling these permissions in a separate, reusable role (that a user potentially reuses in other applications than the tiler/the stac ingestor) is preferable to avoid having duplicate definitions of the same permissions.

We should therefore parameterize the tiler construct with the same `data_access_role_arn` option.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.