adam/seahaven-org-baseline
1
0
Fork 0
mirror of https://github.com/Sea-Haven-Industries/seahaven-org-baseline.git synced 2026-10-02 09:43:21 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

fix(iam): give staging HCP apply the proven Elastic Beanstalk bucket grants (PLAT-213)

Browse source
This commit is contained in:
Adam Moussa 2026-09-18 15:59:19 -04:00
parent 88c7011bfc
commit 247a7cd31b
No known key found for this signature in database
1 changed files with 12 additions and 28 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

40
lib/terraform-substrate/terraform-substrate.template.yaml
View file

@ -3589,38 +3589,22 @@ Resources:
- autoscaling:ResumeProcesses
- autoscaling:SuspendProcesses
Resource: arn:aws:autoscaling:us-east-1:396287094661:autoScalingGroup:*:autoScalingGroupName/awseb-e-6c9m4vb62z-stack-*
- Sid: UseStagingBeanstalkBucket
- Sid: StagingBeanstalkObjects
Effect: Allow
Action:
- s3:GetBucketLocation
- s3:Delete*
- s3:Get*
- s3:Put*
Resource: arn:aws:s3:::elasticbeanstalk-us-east-1-396287094661/*
- Sid: StagingBeanstalkBuckets
Effect: Allow
Action:
- s3:GetBucket*
- s3:ListBucket
- s3:GetBucketPolicy
- s3:GetBucketAcl
- s3:GetBucketVersioning
- s3:GetBucketOwnershipControls
- s3:PutBucketOwnershipControls
- s3:PutBucketPolicy
- s3:PutBucketPublicAccessBlock
Resource: arn:aws:s3:::elasticbeanstalk-us-east-1-396287094661
- Sid: ReadStagingReleaseZips
Effect: Allow
Action:
- s3:GetObject
- s3:GetObjectAcl
- s3:GetObjectVersion
- s3:GetObjectVersionAcl
Resource: arn:aws:s3:::elasticbeanstalk-us-east-1-396287094661/shoc-backend/releases/staging/*
- Sid: ManageStagingEnvironmentObjects
Effect: Allow
Action:
- s3:PutObject
- s3:PutObjectAcl
- s3:PutObjectVersionAcl
- s3:GetObject
- s3:GetObjectAcl
- s3:GetObjectVersion
- s3:GetObjectVersionAcl
- s3:DeleteObject
Resource:
- arn:aws:s3:::elasticbeanstalk-us-east-1-396287094661/resources/environments/e-6c9m4vb62z/*
- arn:aws:s3:::elasticbeanstalk-us-east-1-396287094661/resources/_runtime/_embedded_extensions/shoc-backend/*
- Sid: PutStagingRuntimePolicy
Effect: Allow
Action: iam:PutRolePolicy