meal-order-manager/infra/layer-artifacts-role/permissions-policy.json
Adam Moussa 40ea4ed898
feat(infra): migrate meal-order-manager to HCP Terraform
Freeze SAM CD and add greenfield Terraform for seahaven-prod so HCP is the sole stack deploy path.
2026-08-07 19:19:51 -04:00

26 lines
693 B
JSON

{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "LayerArtifactWrite",
"Effect": "Allow",
"Action": ["s3:PutObject", "s3:GetObject"],
"Resource": "arn:aws:s3:::meal-order-manager-artifacts-011934824531/layers/*"
},
{
"Sid": "HeadObjectRequiresListBucket",
"Effect": "Allow",
"Action": ["s3:ListBucket"],
"Resource": "arn:aws:s3:::meal-order-manager-artifacts-011934824531",
"Condition": {
"StringLike": {"s3:prefix": "layers/*"}
}
},
{
"Sid": "DenyEverythingElse",
"Effect": "Deny",
"NotAction": ["s3:PutObject", "s3:GetObject", "s3:ListBucket"],
"Resource": "*"
}
]
}