aws-cdk-lib/aws-stepfunctions-tasks: Issue with incorrectly generated IAM policy. #30862
Description
Describe the bug
I am working on writing a CDK based step function with a task to call 'tagresources' on an EFS access point:
const tagAccessPoint = new CallAwsService(this, 'TagAccessPoint', {
stateName: 'Tag access point',
service: 'efs',
action: 'tagResource',
iamResources: ['*'],
parameters: {
ResourceId: JsonPath.stringAt('$.pathToArn'),
Tags: [
{
Key: "MYTAGNAME",
Value: JsonPath.stringAt('$.pathToId')
}
]
},
resultPath: JsonPath.DISCARD
})Produces an incorrect a IAM policy snippet.
Expected Behavior
It should be (ref):
{
"Action": "elasticfilesystem:tagResource",
"Resource": "*",
"Effect": "Allow"
}Current Behavior
Produces:
{
"Action": "efs:tagResource",
"Resource": "*",
"Effect": "Allow"
}Which is incorrect, it should be (ref):
Reproduction Steps
Create the following task as part of a CDK defined state machine:
const tagAccessPoint = new CallAwsService(this, 'TagAccessPoint', {
stateName: 'Tag access point',
service: 'efs',
action: 'tagResource',
iamResources: ['*'],
parameters: {
ResourceId: JsonPath.stringAt('$.pathToArn'),
Tags: [
{
Key: "MYTAGNAME",
Value: JsonPath.stringAt('$.pathToId')
}
]
},
resultPath: JsonPath.DISCARD
})Possible Solution
No response
Additional Information/Context
No response
CDK CLI Version
2.147.2
Framework Version
No response
Node.js Version
20
OS
macOS
Language
TypeScript
Language Version
TypeScript (5.4.2)
Other information
No response