Merge branch 'master' of github.com:serverless-operations/serverless-step-functions

Author: horike37

.github/workflows/config.yml

@@ -4,14 +4,14 @@ on: [push, pull_request]
 
 jobs:
   test:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-20.04
     steps:
-      - uses: actions/checkout@v2
-      - uses: actions/setup-node@v2.1.4
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
         with:
-          node-version: 14
+          node-version: 18
       - run: |
-          npm install
+          npm install --legacy-peer-deps
       - run: |
           npm run lint
       - run: |

lib/deploy/stepFunctions/compileIamRole.js

@@ -407,6 +407,22 @@ function getLambdaPermissions(state) {
   }];
 }
 
+function getStateMachineArn(state) {
+  let stateMachineArn;
+
+  if (state.Arguments) {
+    stateMachineArn = state.Arguments.StateMachineArn.trim().startsWith('{%')
+      ? '*'
+      : state.Arguments.StateMachineArn;
+  } else {
+    stateMachineArn = state.Parameters['StateMachineArn.$']
+      ? '*'
+      : state.Parameters.StateMachineArn;
+  }
+
+  return stateMachineArn;
+}
+
 function getStepFunctionsPermissions(state) {
   let stateMachineArn = state.Mode === 'DISTRIBUTED' ? {
     'Fn::Sub': [
@@ -416,8 +432,7 @@ function getStepFunctionsPermissions(state) {
   } : null;
 
   if (!stateMachineArn) {
-    stateMachineArn = state.Parameters['StateMachineArn.$'] ? '*'
-      : state.Parameters.StateMachineArn;
+    stateMachineArn = getStateMachineArn(state);
   }
 
   return [{
@@ -449,8 +464,7 @@ function getStepFunctionsSDKPermissions(state) {
   } : null;
 
   if (!stateMachineArn) {
-    stateMachineArn = state.Parameters['StateMachineArn.$'] ? '*'
-      : state.Parameters.StateMachineArn;
+    stateMachineArn = getStateMachineArn(state);
   }
 
   return [{