From f67bc680b60540073c7007279ea12d41c95c4e28 Mon Sep 17 00:00:00 2001
From: mdugdale <mark.dugdale@bossastudios.com>
Date: Sat, 3 Apr 2021 21:50:45 +0100
Subject: [PATCH] cleaner more readable ids and additional permission required
 for cleanup

---
 dist/base-setup.yml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/dist/base-setup.yml b/dist/base-setup.yml
index a3415f8c..a091cb3e 100644
--- a/dist/base-setup.yml
+++ b/dist/base-setup.yml
@@ -282,6 +282,10 @@ Resources:
             - "logs:DeleteLogGroup"
             - "logs:DeleteSubscriptionFilter"
             - "ecs:DeregisterTaskDefinition"
+            - "lambda:DeleteFunction"
+            - "lambda:InvokeFunction"
+            - "events:RemoveTargets"
+            - "lambda:RemovePermission"
             Resource: "*"
 
 ### cloud watch to kinesis role