Update to version v3.1.0

CHANGELOG.md

@@ -4,6 +4,18 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [3.1.0] - 2021-11-12
+### Changed
+- Added additional permissions for AWS MediaLive IAM Policy. Now has CloudWatch, MediaConnect, and MediaStore access. 
+- Changed case of IAM policy (https://github.com/aws-solutions/live-stream-on-aws/pull/19)
+
+### Updated
+- Axios update to 0.21.2
+- Tmpl update to 1.0.5
+
+### Fixed
+- Add new Permissions to the CloudFormation template that will allow customers to add tags on EML resources. 
+
 ## [3.0.0] - 2020-8-5
 ### Changed
 - The AWS MediaLive default CloudFormation parameter for channel start has been changed to false. 

deployment/live-streaming-on-aws.yaml

@@ -207,7 +207,8 @@ Resources:
                   - medialive:DeleteInputSecurityGroup
                   - medialive:DescribeChannel
                   - medialive:StartChannel
-                  - medialive:TagResource
+                  - medialive:CreateTags 
+                  - medialive:DeleteTags
                 Resource:
                     - !Join ["", ["arn:aws:medialive:", Ref: "AWS::Region", ":", Ref: "AWS::AccountId", ":*"]]
               -
@@ -258,21 +259,53 @@ Resources:
           PolicyName: !Sub "${AWS::StackName}-mediatranscode-role"
           PolicyDocument:
             Statement:
-              -
+              - 
+                Effect: Allow
+                Action:
+                - mediastore:ListContainers
+                - mediastore:PutObject
+                - mediastore:GetObject
+                - mediastore:DeleteObject
+                - mediastore:DescribeObject
+                Resource:
+                  - !Join ["", ["arn:aws:mediastore:", Ref: "AWS::Region", ":", Ref: "AWS::AccountId", ":*"]]
+              - 
+                Effect: Allow
+                Action:
+                - logs:CreateLogGroup
+                - logs:CreateLogStream
+                - logs:PutLogEvents
+                - logs:DescribeLogStreams
+                - logs:DescribeLogGroups
+                Resource: arn:aws:logs:*:*:*
+              - 
                 Effect: Allow
                 Action:
-                  - mediaconnect:ManagedDescribeFlow
-                  - mediaconnect:ManagedAddOutput
-                  - mediaconnect:ManagedRemoveOutput
+                - mediaconnect:ManagedDescribeFlow
+                - mediaconnect:ManagedAddOutput
+                - mediaconnect:ManagedRemoveOutput
                 Resource:
                   - !Join ["", ["arn:aws:mediaconnect:", Ref: "AWS::Region", ":", Ref: "AWS::AccountId", ":*"]]
-              -
+              - 
                 Effect: Allow
                 Action:
-                  - mediapackage:DescribeChannel
+                - ec2:describeSubnets
+                - ec2:describeNetworkInterfaces
+                - ec2:createNetworkInterface
+                - ec2:createNetworkInterfacePermission
+                - ec2:deleteNetworkInterface
+                - ec2:deleteNetworkInterfacePermission
+                - ec2:describeSecurityGroups
+                Resource:
+                  - !Join ["", ["arn:aws:ec2:", Ref: "AWS::Region", ":", Ref: "AWS::AccountId", ":*"]]
+              - 
+                Effect: Allow
+                Action:
+                - mediapackage:DescribeChannel
                 Resource:
                   - !Join ["", ["arn:aws:mediapackage:", Ref: "AWS::Region", ":", Ref: "AWS::AccountId", ":channels/*"]]
 
+
   MediaPackageRole:
     Type: AWS::IAM::Role
     Properties:
@@ -705,4 +738,4 @@ Outputs:
 
   LogsBucket:
     Description: Logs bucket
-    Value: !Ref LogsBucket
+    Value: !Ref LogsBucket