"Invalid permissions on Lambda function" on path parameter

[brettstack]

If you specify a path like /users/{userId}, SAM creates a permission for the source arn ending with "/users/{userId}". I believe this should be "/users/*". Setting path to /users/* works, but not documented/obvious.

[sanathkr]

Makes sense. This should happen because the wildcard path can be anything. SAM has to parse out wildcards and replace them with '*'.

[brettstack]

Solution is to replace variables with * similar to how we are doing for {proxy+} https://github.com/awslabs/serverless-application-model/blob/develop/samtranslator/model/eventsources/push.py#L431

[jlhood]

Pending v1.14.0 release