From cf0d640dca7791d96782cdcda6dc0e0d835aa17f Mon Sep 17 00:00:00 2001
From: Adam Moussa <adam@seahavenind.com>
Date: Fri, 18 Sep 2026 13:31:31 -0400
Subject: [PATCH] fix(iam): allow staging githubdeploy to delete EB version
 cache objects (PLAT-148)

---
 lib/terraform-substrate/terraform-substrate.template.yaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/lib/terraform-substrate/terraform-substrate.template.yaml b/lib/terraform-substrate/terraform-substrate.template.yaml
index b3f93fb..9131ea2 100644
--- a/lib/terraform-substrate/terraform-substrate.template.yaml
+++ b/lib/terraform-substrate/terraform-substrate.template.yaml
@@ -2715,6 +2715,7 @@ Resources:
               - s3:GetObjectAcl
               - s3:GetObjectVersion
               - s3:GetObjectVersionAcl
+              - s3:DeleteObject
             Resource:
               - arn:aws:s3:::elasticbeanstalk-us-east-1-396287094661/shoc-backend/*
               - arn:aws:s3:::elasticbeanstalk-us-east-1-396287094661/resources/*