> Fix Lambda permission Principal to use Sub intrinsic function for proper URL suffix resolution

Bob Strahan · Bob Strahan · commit 661b4509218e · 2025-12-04T19:17:34.000Z
diff --git a/template.yaml b/template.yaml
@@ -7371,7 +7371,7 @@ Resources:
     Properties:
       FunctionName: !Ref TestSetZipExtractorFunction
       Action: lambda:InvokeFunction
-      Principal: s3.${AWS::URLSuffix}
+      Principal: !Sub "s3.${AWS::URLSuffix}"
       SourceArn: !GetAtt TestSetBucket.Arn
 
   TestSetZipExtractorFunctionLogGroup:
