adam/seahaven-org-baseline
1
0
Fork 0
mirror of https://github.com/Sea-Haven-Industries/seahaven-org-baseline.git synced 2026-10-07 10:18:54 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

fix(iam): let staging HCP apply read Elastic Beanstalk service templates (PLAT-213)

Browse source
This commit is contained in:
Adam Moussa 2026-09-18 16:55:44 -04:00
parent f605cc035c
commit 8ec8fc4dc3
1 changed files with 10 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
lib/terraform-substrate/terraform-substrate.template.yaml
View file

@ -3605,6 +3605,16 @@ Resources:
- s3:PutBucketPolicy - s3:PutBucketPolicy
- s3:PutBucketPublicAccessBlock - s3:PutBucketPublicAccessBlock
Resource: arn:aws:s3:::elasticbeanstalk-us-east-1-396287094661 Resource: arn:aws:s3:::elasticbeanstalk-us-east-1-396287094661
# Elastic Beanstalk stages the CloudFormation template for
# configuration UpdateStack calls in its AWS-owned regional
# bucket and CloudFormation fetches it with the caller's
# credentials. Zip deploys never touch this path.
- Sid: ReadBeanstalkServiceTemplates
Effect: Allow
Action:
- s3:GetObject
- s3:GetObjectVersion
Resource: arn:aws:s3:::elasticbeanstalk-us-east-1/*
- Sid: ManageCloudFormationTemplates - Sid: ManageCloudFormationTemplates
Effect: Allow Effect: Allow
Action: Action: