fix(iam): allow staging githubdeploy GetObjectAcl for EB updates

2026-09-30 09:33:13 +00:00 · 2026-09-18 13:16:06 -04:00 · 2026-09-18 13:16:06 -04:00 · a6b5a34512
commit a6b5a34512
parent a3c3741959
1 changed files with 1 additions and 0 deletions
--- a/terraform/live/modules/environment-owned/main.tf
+++ b/terraform/live/modules/environment-owned/main.tf
@ -296,6 +296,7 @@ data "aws_iam_policy_document" "deploy" {
      actions = [
        "s3:PutObject",
        "s3:GetObject",
+        "s3:GetObjectAcl",
      ]
      resources = [
        "arn:aws:s3:::${local.eb_bucket_name}/${var.eb_application_name}/*",