From c5a76bfb91591cce0b8c4aae6b14653d2bfe279b Mon Sep 17 00:00:00 2001
From: Adam Moussa <adam@seahavenind.com>
Date: Fri, 18 Sep 2026 13:31:30 -0400
Subject: [PATCH] fix(iam): allow staging githubdeploy to delete EB version
 cache objects

---
 terraform/live/modules/environment-owned/main.tf | 1 +
 1 file changed, 1 insertion(+)

diff --git a/terraform/live/modules/environment-owned/main.tf b/terraform/live/modules/environment-owned/main.tf
index 2ad1453..5e612d4 100644
--- a/terraform/live/modules/environment-owned/main.tf
+++ b/terraform/live/modules/environment-owned/main.tf
@@ -300,6 +300,7 @@ data "aws_iam_policy_document" "deploy" {
         "s3:GetObjectAcl",
         "s3:GetObjectVersion",
         "s3:GetObjectVersionAcl",
+        "s3:DeleteObject",
       ]
       resources = [
         "arn:aws:s3:::${local.eb_bucket_name}/${var.eb_application_name}/*",