serverless.ymlにバケットパーミッションを追加する方法

Question

以下のserverless.ymlファイルを配備すると、製品イメージ用のバケツの許可が拒否されます。どのようにiamRoleStatementsにパーミッションを設定するか、どこかに設定する必要がありますelse。

service: imagecrops 

provider: 
    name: aws 
    runtime: nodejs4.3 
    memorySize: 1024 
    timeout: 20 
    satege: dev 

    iamRoleStatements: 
     - Effect: "Allow" 
     Action: 
      - "s3:*" 
     Resource: 
      - { "Fn::Join" : ["", ["arn:aws:s3:::", { "Ref" : "ServerlessDeploymentBucket" } ]]} 


package: 
    include: 
    - bin 
    - libs 
    exclude: 
    - tests 
    - serverless-nodejs-image 

functions: 
    cropImage: 
    handler: handler.cropImage 
    description: Crops images, from S3 bucket and puts into new folder 
    events: 
     - s3: 
      bucket: product-images-dev 
      event: s3:ObjectCreated:* 
      rules: 
      - prefix: uploads/ 

Answer 1

serverless.ymlファイルを次のように変更して読み込みを開始しました。

service: imagecrops 

provider: 
    name: aws 
    runtime: nodejs4.3 
    memorySize: 1024 
    timeout: 20 
    satege: dev 

    iamRoleStatements: 
     - Effect: "Allow" 
     Action: 
      - "s3:*" 
     Resource: 
      - { "Fn::Join" : ["", ["arn:aws:s3:::", { "Ref" : "ServerlessDeploymentBucket" } ]]} 
      - "arn:aws:s3:::product-images-dev/*" 


package: 
    include: 
    - bin 
    - libs 
    exclude: 
    - tests 
    - serverless-nodejs-image 

functions: 
    cropImage: 
    handler: handler.cropImage 
    description: Crops images, from S3 bucket and puts into new folder 
    events: 
     - s3: 
      bucket: product-images-dev 
      event: s3:ObjectCreated:* 
      rules: 
      - prefix: uploads/