Ryan S. Brown 5c06296533 Remove implicit dependency between IAM policy and log groups
Until now, the IAM policy had a dependency on log groups completing
before it could finish because of the use of `Fn::GetAtt` with a log
group, meaning the policy couldn't provision until all log groups were
ready.

This patch changes the log group reference in the CFN template from:

```
{ "Fn::GetAtt": ["MyFuncLogGroup", "Arn"] }
```

to

```
{"Fn::Sub": "arn:aws:logs:${AWS::Region}:${AWS::AccountId}:log-group:/aws/lambda/my-service-dev-myfunction:*"}
```

Meaning the policy can be resolved 100% with pseudoparams for log group ARNs.
This speeds up the CFN initial deploy significantly, and somewhat
improves deployments that add or rename functions.

Having this dependency removed is also the first step in allowing log
groups to be moved to a nested stack.
2017-03-11 14:03:04 -05:00
..
2017-03-07 09:12:29 -08:00
2017-01-14 14:04:43 -08:00
2016-11-22 12:49:26 +01:00
2016-11-22 12:49:26 +01:00
2016-11-22 12:49:26 +01:00
2016-12-13 08:24:25 +01:00
2016-11-22 12:49:26 +01:00
2016-11-22 12:49:26 +01:00
2016-11-27 21:55:19 +11:00
2017-02-03 14:55:38 +01:00