DestinationArn for vendor kinesis cannot be used without roleArn

[pedrodelgallego]

DestinationArn for vendor kinesis cannot be used without roleArn

[hampsterx]

Try adding passRole to iamRoleStatement eg

  iamRoleStatements:
    - Effect: "Allow"
      Action:
        - "logs:PutSubscriptionFilter"
      Resource: "*"
    - Effect: "Allow"
      Action:
        - "iam:PassRole"
      Resource: "*"

Seems to match what is required/documented here:

https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/SubscriptionFilters.html

[andrhamm]

The above recommendation by @hampsterx didn't work for me.

EDIT: Oops, I hadn't enabled the serverless-iam-roles-per-function plugin. That, in conjunction with @hampsterx's tip got it working for me. 👏

[pedrodelgallego]

@hampsterx it works!

[omry-hay]

@hampsterx, @pedrodelgallego @andrhamm, thank you for raising the issue and finding a fix for it.
I've added a PR for fixing this issue.
In addition I've changed the configuration to be more robust, so you can use environment variables to override some basic configurations.

@theburningmonk - Can you please review it?

[theburningmonk]

Hi guys, thanks for reporting this. Sadly this project is no longer necessary, per se, as I have published a version of this as a SAR app, here which lets you specify the ARN for the target to be either Lambda or Kinesis.