adam/shoc-backend
1
0
Fork 0
mirror of https://github.com/Sea-Haven-Industries/shoc-backend.git synced 2026-09-30 07:13:12 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

fix(iam): grant staging githubdeploy named S3 reads on EB resources prefix

Browse source
This commit is contained in:
Adam Moussa 2026-09-18 13:22:06 -04:00
parent a6b5a34512
commit afa16bd570
No known key found for this signature in database
1 changed files with 4 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
terraform/live/modules/environment-owned/main.tf
View file

@ -295,12 +295,15 @@ data "aws_iam_policy_document" "deploy" {
effect = "Allow"
actions = [
"s3:PutObject",
"s3:PutObjectAcl",
"s3:GetObject",
"s3:GetObjectAcl",
"s3:GetObjectVersion",
"s3:GetObjectVersionAcl",
]
resources = [
"arn:aws:s3:::${local.eb_bucket_name}/${var.eb_application_name}/*",
"arn:aws:s3:::${local.eb_bucket_name}/resources/_runtime/_embedded_extensions/${var.eb_application_name}/*",
"arn:aws:s3:::${local.eb_bucket_name}/resources/*",
]
}
}