fix(iam): scope staging githubdeploy S3 objects to SHOC and staging EB prefixes (PLAT-148)

This commit is contained in:
Adam Moussa 2026-09-18 14:06:42 -04:00
parent ac035d6675
commit 6ad171e5da
No known key found for this signature in database

View file

@ -2718,8 +2718,9 @@ Resources:
- s3:GetObjectVersionAcl
- s3:DeleteObject
Resource:
- arn:aws:s3:::elasticbeanstalk-us-east-1-396287094661
- arn:aws:s3:::elasticbeanstalk-us-east-1-396287094661/*
- arn:aws:s3:::elasticbeanstalk-us-east-1-396287094661/shoc-backend/*
- arn:aws:s3:::elasticbeanstalk-us-east-1-396287094661/resources/_runtime/_embedded_extensions/shoc-backend/*
- arn:aws:s3:::elasticbeanstalk-us-east-1-396287094661/resources/environments/e-6c9m4vb62z/*
- Sid: UseBeanstalkBucket
Effect: Allow
Action: