fix(codepipeline-actions): use codebuild batch iam permissions when `…

…executeBatchBuild: true` (aws#12181) If the `executeBatchBuild` prop is added to trigger a batch build, we also need to switch the IAM permissions to the ones which allow triggering a batch build. This does that. This should probably have been part of aws#11741
flochaz · Jan 5, 2021 · b5a3338 · b5a3338
1 parent 1bd9bf4
commit b5a3338
Show file tree

Hide file tree

Showing 3 changed files with 545 additions and 2 deletions.
diff --git a/packages/@aws-cdk/aws-codepipeline-actions/lib/codebuild/build-action.ts b/packages/@aws-cdk/aws-codepipeline-actions/lib/codebuild/build-action.ts
@@ -139,8 +139,8 @@ export class CodeBuildAction extends Action {
       resources: [this.props.project.projectArn],
       actions: [
         'codebuild:BatchGetBuilds',
-        'codebuild:StartBuild',
-        'codebuild:StopBuild',
+        `codebuild:${this.props.executeBatchBuild ? 'StartBuildBatch' : 'StartBuild'}`,
+        `codebuild:${this.props.executeBatchBuild ? 'StopBuildBatch' : 'StopBuild'}`,
       ],
     }));