add download to issued cert

http-api/template.yaml

@@ -2,6 +2,9 @@ AWSTemplateFormatVersion: 2010-09-09
 Transform: AWS::Serverless-2016-10-31
 
 Parameters:
+  BucketName:
+    Type: String
+    Default: saladeaula.digital
   UserTable:
     Type: String
     Default: betaeducacao-prod-users_d2o3r5gmm4it7j
@@ -11,9 +14,6 @@ Parameters:
   EnrollmentTable:
     Type: String
     Default: betaeducacao-prod-enrollments
-  NewEnrollmentTable:
-    Type: String
-    Default: saladeaula_enrollments
   CourseTable:
     Type: String
     Default: saladeaula_courses
@@ -38,6 +38,7 @@ Globals:
         ORDER_TABLE: !Ref OrderTable
         ENROLLMENT_TABLE: !Ref EnrollmentTable
         COURSE_TABLE: !Ref CourseTable
+        BUCKET_NAME: !Ref BucketName
         KONVIVA_API_URL: https://lms.saladeaula.digital
         KONVIVA_SECRET_KEY: "{{resolve:ssm:/betaeducacao/konviva/secret_key/str}}"
         MEILISEARCH_HOST: https://meili.saladeaula.digital
@@ -85,6 +86,8 @@ Resources:
             TableName: !Ref OrderTable
         - DynamoDBCrudPolicy:
             TableName: !Ref EnrollmentTable
+        - S3ReadPolicy:
+            BucketName: !Ref BucketName
         - Version: 2012-10-17
           Statement:
             - Effect: Allow