adam/shoc-backend
1
0
Fork 0
mirror of https://github.com/Sea-Haven-Industries/shoc-backend.git synced 2026-10-07 16:19:07 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

fix(iam): scope staging githubdeploy S3 object access to the EB bucket

Browse source
This commit is contained in:
Adam Moussa 2026-09-18 13:37:16 -04:00
parent c5a76bfb91
commit de409f8c8d
No known key found for this signature in database
1 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
terraform/live/modules/environment-owned/main.tf
View file

@ -303,8 +303,8 @@ data "aws_iam_policy_document" "deploy" {
"s3:DeleteObject", "s3:DeleteObject",
] ]
resources = [ resources = [
"arn:aws:s3:::${local.eb_bucket_name}/${var.eb_application_name}/*", "arn:aws:s3:::${local.eb_bucket_name}",
"arn:aws:s3:::${local.eb_bucket_name}/resources/*", "arn:aws:s3:::${local.eb_bucket_name}/*",
] ]
} }
} }