ci: add security groups for database access

montoyaobeso · Jun 4, 2024 · fab3fa7 · fab3fa7
1 parent 16aae18
commit fab3fa7
Showing 1 changed file with 10 additions and 8 deletions.
diff --git a/template.yml b/template.yml
@@ -19,14 +19,6 @@ Parameters:
   SecretName:
     Description: "Enail sender servide secret name."
     Type: "String"
-  VpcConfig:
-    SecurityGroupIds:
-      - sg-0a38ddf1ec1cf8ba6
-    SubnetIds:
-      - subnet-073eb3490728cadab
-      - subnet-074f00c540bfc2f19
-      - subnet-05975dbcc28bc6ffb
-      - subnet-0d4ee08a8b2e795c9
 
 Globals:
   Function:
@@ -52,10 +44,20 @@ Resources:
           Properties:
             ApiId: !Ref Api
       Policies:
+      Policies:
+        - AWSLambdaVPCAccessExecutionRole: {}
         - AWSSecretsManagerGetSecretValuePolicy:
             SecretArn: !Sub 'arn:aws:secretsmanager:${AWS::Region}:${AWS::AccountId}:secret:${SecretName}*'
         - S3FullAccessPolicy:
             BucketName: !Ref BucketName
+      VpcConfig:
+        SecurityGroupIds:
+          - sg-0a38ddf1ec1cf8ba6
+        SubnetIds:
+          - subnet-073eb3490728cadab
+          - subnet-074f00c540bfc2f19
+          - subnet-05975dbcc28bc6ffb
+          - subnet-0d4ee08a8b2e795c9
 
   Api:
     Name: !Sub "${Project}-${Stage}-http-api"