From cae921ac3980c05ebf37f87006eddf8cbf3c3b7c Mon Sep 17 00:00:00 2001 From: Claude Date: Wed, 26 Aug 2026 19:00:30 +0000 Subject: [PATCH] Grant lambda role dynamodb:BatchGetItem on signals table Search result hydration in threadsApi.ts calls BatchGetItem against the signals table, but the lambda IAM policy only granted GetItem, PutItem, UpdateItem, DeleteItem, Query, BatchWriteItem, and Scan, causing production AccessDeniedException failures. --- deploy/compute.tf | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/deploy/compute.tf b/deploy/compute.tf index 09ed119d..0df035cf 100644 --- a/deploy/compute.tf +++ b/deploy/compute.tf @@ -53,8 +53,8 @@ resource "aws_iam_role_policy" "lambda_permissions" { Effect = "Allow" Action = [ "dynamodb:GetItem", "dynamodb:PutItem", "dynamodb:UpdateItem", - "dynamodb:DeleteItem", "dynamodb:Query", "dynamodb:BatchWriteItem", - "dynamodb:Scan" + "dynamodb:DeleteItem", "dynamodb:Query", "dynamodb:BatchGetItem", + "dynamodb:BatchWriteItem", "dynamodb:Scan" ] Resource = [ aws_dynamodb_table.accounts.arn,