callummackenzie/latest-lambda-layer-action

Update the AWS lambda layers for a given function to their latest versions

Latest Lambda Layer Action

This action takes given aws credentials and updates the lambda layers of the given function to their latest versions

Usage

name: Update AWS Lambda Function Layers

on:
  release:
    types: [created]
  push:
    branches:
      - master

jobs:
  update_lambda_layers:
  	name: Update lambda layer versions
    runs-on: ubuntu-latest
    steps:
      - name: Update layers
        uses: callummackenzie/[email protected]
        with:
          aws_access_key_id: ${{ secrets.AWS_ACCESS_KEY_ID }}
          aws_secret_access_key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
          aws_region: ${{ secrets.AWS_REGION }
          function_name: SomeAWSFunction

Parameters

• aws_access_key_id
  • Required
  • The aws access key id for an IAM user
• aws_secret_access_key
  • Required
  • The secret access key for the same IAM user used in aws_access_key_id
• aws_region
  • Required
  • The aws region in which the desired lambda function is located such as us-east-1
• function_name
  • Required
  • The lambda function name to be updated (not the ARN)

AWS Permissions Policy

The AWS IAM user this action uses must have permissions to:

• lambda:GetFunctionConfiguration for the desired lambda(s)
• lambda:ListLayerVersions for the desired layer(s)
• lambda:UpdateFunctionConfiguration for the desired lambda(s)

latest-lambda-layer-action's Issues

Error when using Amazon Layer

User: arn:aws:iam::<numbers>:user/github-actions is not authorized to perform: lambda:ListLayerVersions on resource: arn:aws:lambda:***:133256977650:layer:AWS-Parameters-and-Secrets-Lambda-Extension because no resource-based policy allows the lambda:ListLayerVersions action

Not sure how to get past this. It's got the same permissions as my other layers in the policy, but no matter what I change I always get this error. I'm assuming it's something weird with it not being owned by me, but honestly I've got absolutely no idea why it won't work.

        {
            "Sid": "VisualEditor1",
            "Effect": "Allow",
            "Action": "lambda:ListLayerVersions",
            "Resource": "*"
        }

Any ideas? It's a shame because I can't get it to update just my other layers.
Thanks