fix(iam): allow staging githubdeploy GetObjectAcl for EB updates

This commit is contained in:
Adam Moussa 2026-09-18 13:16:06 -04:00
parent a3c3741959
commit a6b5a34512
No known key found for this signature in database

View file

@ -296,6 +296,7 @@ data "aws_iam_policy_document" "deploy" {
actions = [ actions = [
"s3:PutObject", "s3:PutObject",
"s3:GetObject", "s3:GetObject",
"s3:GetObjectAcl",
] ]
resources = [ resources = [
"arn:aws:s3:::${local.eb_bucket_name}/${var.eb_application_name}/*", "arn:aws:s3:::${local.eb_bucket_name}/${var.eb_application_name}/*",