fix(iam): allow staging HCP apply to use the Elastic Beanstalk bucket (PLAT-213)

This commit is contained in:
Adam Moussa 2026-09-18 15:36:24 -04:00
parent 50b8fd2d41
commit 4b1f066040
No known key found for this signature in database

View file

@ -3589,6 +3589,25 @@ Resources:
- autoscaling:ResumeProcesses
- autoscaling:SuspendProcesses
Resource: arn:aws:autoscaling:us-east-1:396287094661:autoScalingGroup:*:autoScalingGroupName/awseb-e-6c9m4vb62z-stack-*
- Sid: UseStagingBeanstalkBucket
Effect: Allow
Action:
- s3:GetBucketLocation
- s3:ListBucket
- s3:GetBucketPolicy
- s3:GetBucketAcl
- s3:GetBucketVersioning
- s3:GetBucketOwnershipControls
Resource: arn:aws:s3:::elasticbeanstalk-us-east-1-396287094661
- Sid: ManageStagingEnvironmentObjects
Effect: Allow
Action:
- s3:GetObject
- s3:PutObject
- s3:DeleteObject
Resource:
- arn:aws:s3:::elasticbeanstalk-us-east-1-396287094661/resources/environments/e-6c9m4vb62z/*
- arn:aws:s3:::elasticbeanstalk-us-east-1-396287094661/resources/_runtime/_embedded_extensions/shoc-backend/*
- Sid: PutStagingRuntimePolicy
Effect: Allow
Action: iam:PutRolePolicy