Additional permissions for LambdaURL, closing issue 77

Author: achrafsouk

lib/image-optimization-stack.ts

@@ -261,12 +261,18 @@ export class ImageOptimizationStack extends Stack {
     const cfnImageDelivery = imageDelivery.node.defaultChild as CfnDistribution;
     cfnImageDelivery.addPropertyOverride(`DistributionConfig.Origins.${(STORE_TRANSFORMED_IMAGES === 'true')?"1":"0"}.OriginAccessControlId`, oac.getAtt("Id"));
 
-    imageProcessing.addPermission("AllowCloudFrontServicePrincipal", {
+    imageProcessing.addPermission("AllowCloudFrontServicePrincipal1", {
       principal: new iam.ServicePrincipal("cloudfront.amazonaws.com"),
       action: "lambda:InvokeFunctionUrl",
       sourceArn: `arn:aws:cloudfront::${this.account}:distribution/${imageDelivery.distributionId}`
     })
 
+    imageProcessing.addPermission("AllowCloudFrontServicePrincipal2", {
+      principal: new iam.ServicePrincipal("cloudfront.amazonaws.com"),
+      action: "lambda:InvokeFunction",
+      invokedViaFunctionUrl: true
+    })
+
     new CfnOutput(this, 'ImageDeliveryDomain', {
       description: 'Domain name of image delivery',
       value: imageDelivery.distributionDomainName

package.json

@@ -22,7 +22,7 @@
     "typescript": "~5.3.3"
   },
   "dependencies": {
-    "aws-cdk-lib": "2.189.1",
+    "aws-cdk-lib": "2.227.0",
     "constructs": "^10.3.0",
     "source-map-support": "^0.5.21"
   }