fix(iam): let staging githubdeploy GetObject the release zip

This commit is contained in:
Adam Moussa 2026-09-18 13:04:48 -04:00
parent 68ad7362df
commit ad73bd132c
No known key found for this signature in database

View file

@ -292,8 +292,11 @@ data "aws_iam_policy_document" "deploy" {
dynamic "statement" {
for_each = local.use_legacy_s3_policy ? [] : [1]
content {
effect = "Allow"
actions = ["s3:PutObject"]
effect = "Allow"
actions = [
"s3:PutObject",
"s3:GetObject",
]
resources = ["arn:aws:s3:::${local.eb_bucket_name}/${var.eb_application_name}/*"]
}
}