procurement-ingest/infra/shoc-assessment-reader/permissions-policy.json

47 lines
1.6 KiB
JSON
Raw Normal View History

{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "ReadProcurementTables",
"Effect": "Allow",
"Action": [
"dynamodb:GetItem",
"dynamodb:Query",
"dynamodb:Scan",
"dynamodb:DescribeTable"
],
"Resource": [
"arn:aws:dynamodb:us-east-1:011934824531:table/purchase-orders",
"arn:aws:dynamodb:us-east-1:011934824531:table/purchase-orders/index/*",
"arn:aws:dynamodb:us-east-1:011934824531:table/verified-sites",
"arn:aws:dynamodb:us-east-1:011934824531:table/verified-sites/index/*",
"arn:aws:dynamodb:us-east-1:011934824531:table/pending-site-review",
"arn:aws:dynamodb:us-east-1:011934824531:table/pending-site-review/index/*",
"arn:aws:dynamodb:us-east-1:011934824531:table/WorkOrders",
"arn:aws:dynamodb:us-east-1:011934824531:table/WorkOrders/index/*",
"arn:aws:dynamodb:us-east-1:011934824531:table/WorkOrderComments",
"arn:aws:dynamodb:us-east-1:011934824531:table/WorkOrderComments/index/*"
],
"Condition": {
"DateLessThan": {
"aws:CurrentTime": "2026-08-23T00:00:00Z"
}
}
},
{
"Sid": "DecryptTableCmkViaDynamo",
"Effect": "Allow",
"Action": "kms:Decrypt",
"Resource": "arn:aws:kms:us-east-1:011934824531:key/be5fa4cb-c546-40fe-a13d-c7bec79f5d12",
"Condition": {
"StringEquals": {
"kms:ViaService": "dynamodb.us-east-1.amazonaws.com"
},
"DateLessThan": {
"aws:CurrentTime": "2026-08-23T00:00:00Z"
}
}
}
]
}