Altostra Docs

    ›How To

    Getting Started

    • Overview
    • Connect your accounts
    • Install the developer tools
    • Log in from the CLI

    Tutorials

    • Create a Static Website

    How To

    • Manage environments
    • Manage configuration sets
    • Create a new project
    • Deploy an Altostra Project
    • Configure log shipping
    • Grant access to vendor services
    • Use the Parameter Store
    • Use a custom CloudFormation resource
    • Attach a custom policy to a Function

    CLI

    • Altostra CLI
    • Commands

      • compile
      • config
      • console
      • deploy
      • deployments
      • images
      • init
      • templates
      • local run
      • login
      • logout
      • push
      • whoami

      Options

      • --debug
      • --verbose
    • Configuration files

    Errors And Solutions

    • Autnentication Required

    Technical Reference

    • Blueprint
    • Project image
    • Environments
    • Configuration sets
    • Image Repository
    • Log Shipping

    Grant access to vendor services

    A vendor-service resource lets grant access to an entire service instead of on specific resource. For example, when using AWS, and you wish to grant a Lambda Function access to the S3 service, so it can manage buckets. This is in contrast to granting the Lambda Function permissions to access a bucket and the objects in it.

    Add a Vendor service to your Blueprint

    We'll use the S3 service as an example.

    1. Add the S3 service to your Blueprint.
      Vendor services
    2. Create a connection from the function to the S3 service you've just added.
    3. Set the desired access-level to the service.
      Vendor services access

    When you deploy the project, an access policy is created that grants the function the permissions required.

    ← Configure log shippingUse the Parameter Store →
    • Add a Vendor service to your Blueprint
    © 2020 Altostra, Inc.