adam/seahaven-org-baseline
1
0
Fork 0
mirror of https://github.com/Sea-Haven-Industries/seahaven-org-baseline.git synced 2026-10-02 13:13:22 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

fix(iam): allow staging HCP apply to write CloudFormation template buckets (PLAT-213)

Browse source
This commit is contained in:
Adam Moussa 2026-09-18 16:06:06 -04:00
parent 247a7cd31b
commit f605cc035c
No known key found for this signature in database
1 changed files with 18 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

18
lib/terraform-substrate/terraform-substrate.template.yaml
View file

@ -3605,6 +3605,24 @@ Resources:
- s3:PutBucketPolicy
- s3:PutBucketPublicAccessBlock
Resource: arn:aws:s3:::elasticbeanstalk-us-east-1-396287094661
- Sid: ManageCloudFormationTemplates
Effect: Allow
Action:
- s3:CreateBucket
- s3:GetBucket*
- s3:ListBucket
- s3:PutBucketPolicy
- s3:PutBucketOwnershipControls
- s3:PutBucketPublicAccessBlock
- s3:PutEncryptionConfiguration
Resource: arn:aws:s3:::cf-templates-*
- Sid: ManageCloudFormationTemplateObjects
Effect: Allow
Action:
- s3:Get*
- s3:Put*
- s3:Delete*
Resource: arn:aws:s3:::cf-templates-*/*
- Sid: PutStagingRuntimePolicy
Effect: Allow
Action: iam:PutRolePolicy