fix(iam): allow staging HCP apply to copy the current release zip (PLAT-213)

This commit is contained in:
Adam Moussa 2026-09-18 15:42:23 -04:00
parent 4b1f066040
commit e1e360d100
No known key found for this signature in database

View file

@ -3599,11 +3599,21 @@ Resources:
- s3:GetBucketVersioning - s3:GetBucketVersioning
- s3:GetBucketOwnershipControls - s3:GetBucketOwnershipControls
Resource: arn:aws:s3:::elasticbeanstalk-us-east-1-396287094661 Resource: arn:aws:s3:::elasticbeanstalk-us-east-1-396287094661
- Sid: ReadStagingReleaseZips
Effect: Allow
Action:
- s3:GetObject
- s3:GetObjectAcl
- s3:GetObjectVersion
- s3:GetObjectVersionAcl
Resource: arn:aws:s3:::elasticbeanstalk-us-east-1-396287094661/shoc-backend/releases/staging/*
- Sid: ManageStagingEnvironmentObjects - Sid: ManageStagingEnvironmentObjects
Effect: Allow Effect: Allow
Action: Action:
- s3:GetObject - s3:GetObject
- s3:GetObjectAcl
- s3:PutObject - s3:PutObject
- s3:PutObjectAcl
- s3:DeleteObject - s3:DeleteObject
Resource: Resource:
- arn:aws:s3:::elasticbeanstalk-us-east-1-396287094661/resources/environments/e-6c9m4vb62z/* - arn:aws:s3:::elasticbeanstalk-us-east-1-396287094661/resources/environments/e-6c9m4vb62z/*