adam/seahaven-org-baseline
1
0
Fork 0
mirror of https://github.com/Sea-Haven-Industries/seahaven-org-baseline.git synced 2026-10-07 16:08:55 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Compare commits

base: adam:cf0d640dca7791d96782cdcda6dc0e0d835aa17f
Branches Tags
adam:main
...
compare: adam:6ad171e5da48bdde5ff437d3520faba54f6556af
Branches Tags
adam:main

4 commits
cf0d640dca ... 6ad171e5da

Author SHA1 Message Date
Adam Moussa
6ad171e5da
fix(iam): scope staging githubdeploy S3 objects to SHOC and staging EB prefixes (PLAT-148) 2026-09-18 14:06:42 -04:00
Adam Moussa
ac035d6675
fix(iam): allow staging githubdeploy GetBucketPolicy on the EB bucket (PLAT-148) 2026-09-18 14:00:13 -04:00
Adam Moussa
07d4069bad
fix(iam): allow staging githubdeploy PutObjectVersionAcl on EB artifacts (PLAT-148) 2026-09-18 13:42:25 -04:00
Adam Moussa
d54d7f0aa2
fix(iam): scope staging githubdeploy S3 object access to the EB bucket (PLAT-148) 2026-09-18 13:37:18 -04:00
1 changed files with 7 additions and 1 deletions
Show stats Expand all files Collapse all files

8
lib/terraform-substrate/terraform-substrate.template.yaml
View file

@ -2711,6 +2711,7 @@ Resources:
Action:
- s3:PutObject
- s3:PutObjectAcl
- s3:PutObjectVersionAcl
- s3:GetObject
- s3:GetObjectAcl
- s3:GetObjectVersion
@ -2718,12 +2719,17 @@ Resources:
- s3:DeleteObject
Resource:
- arn:aws:s3:::elasticbeanstalk-us-east-1-396287094661/shoc-backend/*
- arn:aws:s3:::elasticbeanstalk-us-east-1-396287094661/resources/*
- arn:aws:s3:::elasticbeanstalk-us-east-1-396287094661/resources/_runtime/_embedded_extensions/shoc-backend/*
- arn:aws:s3:::elasticbeanstalk-us-east-1-396287094661/resources/environments/e-6c9m4vb62z/*
- Sid: UseBeanstalkBucket
Effect: Allow
Action:
- s3:GetBucketLocation
- s3:ListBucket
- s3:GetBucketPolicy
- s3:GetBucketAcl
- s3:GetBucketVersioning
- s3:GetBucketOwnershipControls
Resource: arn:aws:s3:::elasticbeanstalk-us-east-1-396287094661
- Sid: ReadDeployParameters
Effect: Allow