mirror of
https://github.com/Sea-Haven-Industries/meal-order-manager.git
synced 2026-09-30 06:33:12 +00:00
Freeze SAM CD and add greenfield Terraform for seahaven-prod so HCP is the sole stack deploy path.
26 lines
693 B
JSON
26 lines
693 B
JSON
{
|
|
"Version": "2012-10-17",
|
|
"Statement": [
|
|
{
|
|
"Sid": "LayerArtifactWrite",
|
|
"Effect": "Allow",
|
|
"Action": ["s3:PutObject", "s3:GetObject"],
|
|
"Resource": "arn:aws:s3:::meal-order-manager-artifacts-011934824531/layers/*"
|
|
},
|
|
{
|
|
"Sid": "HeadObjectRequiresListBucket",
|
|
"Effect": "Allow",
|
|
"Action": ["s3:ListBucket"],
|
|
"Resource": "arn:aws:s3:::meal-order-manager-artifacts-011934824531",
|
|
"Condition": {
|
|
"StringLike": {"s3:prefix": "layers/*"}
|
|
}
|
|
},
|
|
{
|
|
"Sid": "DenyEverythingElse",
|
|
"Effect": "Deny",
|
|
"NotAction": ["s3:PutObject", "s3:GetObject", "s3:ListBucket"],
|
|
"Resource": "*"
|
|
}
|
|
]
|
|
}
|