Skip to content

fix(iam): apply provider.iam.role.path to state machine execution roles#674

Merged
zirkelc merged 1 commit intoserverless-operations:masterfrom
BANCS-Norway:fix-653-iam-role-path
Mar 18, 2026
Merged

fix(iam): apply provider.iam.role.path to state machine execution roles#674
zirkelc merged 1 commit intoserverless-operations:masterfrom
BANCS-Norway:fix-653-iam-role-path

Conversation

@VirtueMe
Copy link
Copy Markdown
Collaborator

Summary

  • Applies provider.iam.role.path to all IAM roles generated by the plugin
  • Fixes the state machine execution role (compileIamRole)
  • Fixes the scheduled events role (compileScheduledEvents)
  • Fixes the CloudWatch/EventBridge events role (compileCloudWatchEventEvents)
  • Fixes the API Gateway to Step Functions role (apiGateway/iamRole)
  • Fixes the notifications role (compileNotifications)

Note: Three of the above files (compileCloudWatchEventEvents, apiGateway/iamRole, compileNotifications) also lack permissionsBoundary support — that is a pre-existing gap not introduced by this PR.

Test plan

  • State machine execution role receives Path when provider.iam.role.path is set
  • Scheduled events role receives Path
  • CloudWatch/EventBridge events role receives Path
  • API Gateway role receives Path
  • Notifications role receives Path (passed through generator chain, not patched after)
  • Full test suite passes (432 tests)

Closes #653

🤖 Generated with Claude Code

Step function IAM roles were not inheriting the path set via
provider.iam.role.path, causing deployment failures when IAM path
restrictions are enforced. Applies the path to both the state machine
execution role and the scheduled events role.

Closes serverless-operations#653

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
@pkg-pr-new
Copy link
Copy Markdown

pkg-pr-new bot commented Mar 11, 2026

Open in StackBlitz

npm i https://pkg.pr.new/serverless-operations/serverless-step-functions@674

commit: 41057fd

@zirkelc zirkelc merged commit aa4755a into serverless-operations:master Mar 18, 2026
2 checks passed
@VirtueMe VirtueMe deleted the fix-653-iam-role-path branch March 18, 2026 08:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

serverless-step-functions plugin is not using provider.iam.role.path

2 participants