update issue cert

enrollments-events/template.yaml

@@ -230,12 +230,7 @@ Resources:
               detail-type: [EXPIRE]
               detail:
                 keys:
-                  sk:
-                    - SCHEDULE#REMINDER_NO_ACCESS_AFTER_3_DAYS
-                    # Post-migration: remove the following lines
-                    - schedules#does_not_access
-                    - schedules#reminder_no_access_3_days
-                    - SCHEDULES#REMINDER_NO_ACCESS_AFTER_3_DAYS
+                  sk: [SCHEDULE#REMINDER_NO_ACCESS_AFTER_3_DAYS]
 
   # 7 days after the user's last activity in the course
   EventReminderNoActivityAfter7DaysFunction:
@@ -257,10 +252,7 @@ Resources:
               detail-type: [EXPIRE]
               detail:
                 keys:
-                  sk:
-                    - SCHEDULE#REMINDER_NO_ACTIVITY_AFTER_7_DAYS
-                    # Post-migration: remove the following line
-                    - schedules#no_activity
+                  sk: [SCHEDULE#REMINDER_NO_ACTIVITY_AFTER_7_DAYS]
 
   # 30 days before the course access period ends.
   EventReminderAccessPeriodBefore30DaysFunction:
@@ -282,10 +274,7 @@ Resources:
               detail-type: [EXPIRE]
               detail:
                 keys:
-                  sk:
-                    - SCHEDULE#REMINDER_ACCESS_PERIOD_BEFORE_30_DAYS
-                    # Post-migration: remove the following line
-                    - schedules#access_period_ends
+                  sk: [SCHEDULE#REMINDER_ACCESS_PERIOD_BEFORE_30_DAYS]
 
   # If a certificate exists, remind the user 30 days before the certificate expires
   EventReminderCertExpirationBefore30DaysFunction:
@@ -307,10 +296,7 @@ Resources:
               detail-type: [EXPIRE]
               detail:
                 keys:
-                  sk:
-                    - SCHEDULE#REMINDER_CERT_EXPIRATION_BEFORE_30_DAYS
-                    # Post-migration: remove the following line
-                    - schedules#expiration
+                  sk: [SCHEDULE#REMINDER_CERT_EXPIRATION_BEFORE_30_DAYS]
 
   # If there is no certificate and the access period has ended,
   # the enrollment will be marked as expired
@@ -332,10 +318,7 @@ Resources:
               detail-type: [EXPIRE]
               detail:
                 keys:
-                  sk:
-                    - SCHEDULE#SET_AS_EXPIRED
-                    # Post-migration: remove the following line
-                    - schedules#access_period_ends
+                  sk: [SCHEDULE#SET_AS_EXPIRED]
 
   # After the certificate expires, the enrollment will be marked as archived
   EventSetAsArchivedFunction:
@@ -356,10 +339,7 @@ Resources:
               detail-type: [EXPIRE]
               detail:
                 keys:
-                  sk:
-                    - SCHEDULE#SET_AS_ARCHIVED
-                    # Post-migration: remove the following line
-                    - schedules#archive_it
+                  sk: [SCHEDULE#SET_AS_ARCHIVED]
 
   EventScheduleRemindersFunction:
     Type: AWS::Serverless::Function
@@ -388,6 +368,9 @@ Resources:
       Handler: events.issue_cert.lambda_handler
       LoggingConfig:
         LogGroup: !Ref EventLog
+      Policies:
+        - DynamoDBCrudPolicy:
+            TableName: !Ref EnrollmentTable
       Events:
         DynamoDBEvent:
           Type: EventBridgeRule