adam/forgejo
1
0
Fork 0
mirror of https://github.com/Sea-Haven-Industries/forgejo.git synced 2026-09-30 17:53:10 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

fix(terraform): let the plan role read backup object metadata

Browse source 
HeadObject on the Lambda zip is s3:GetObject. The plan role only had the bucket ARNs.
This commit is contained in:
Adam Moussa 2026-09-29 19:25:14 -04:00
parent d511861296
commit 566a669c7b
No known key found for this signature in database
1 changed files with 4 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
terraform/hcp_iam.tf
View file

@ -605,13 +605,17 @@ data "aws_iam_policy_document" "hcptf_plan_refresh" {
"s3:GetBucketWebsite",
"s3:GetEncryptionConfiguration",
"s3:GetLifecycleConfiguration",
"s3:GetObject",
"s3:GetReplicationConfiguration",
"s3:ListBucket",
]
resources = [
"arn:aws:s3:::${local.backup_bucket_name}",
"arn:aws:s3:::${local.backup_bucket_name}/*",
"arn:aws:s3:::${local.replica_bucket_name}",
"arn:aws:s3:::${local.replica_bucket_name}/*",
"arn:aws:s3:::${local.artifacts_bucket_name}",
"arn:aws:s3:::${local.artifacts_bucket_name}/*",
]
}