adam/shoc-backend
1
0
Fork 0
mirror of https://github.com/Sea-Haven-Industries/shoc-backend.git synced 2026-10-07 16:19:07 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

fix(iam): scope staging githubdeploy S3 objects to SHOC and staging EB prefixes

Browse source
This commit is contained in:
Adam Moussa 2026-09-18 14:06:42 -04:00
parent f4d9a4a1b8
commit e2fc540d07
No known key found for this signature in database
1 changed files with 3 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
terraform/live/modules/environment-owned/main.tf
View file

@ -304,8 +304,9 @@ data "aws_iam_policy_document" "deploy" {
"s3:DeleteObject",
]
resources = [
"arn:aws:s3:::${local.eb_bucket_name}",
"arn:aws:s3:::${local.eb_bucket_name}/*",
"arn:aws:s3:::${local.eb_bucket_name}/${var.eb_application_name}/*",
"arn:aws:s3:::${local.eb_bucket_name}/resources/_runtime/_embedded_extensions/${var.eb_application_name}/*",
"arn:aws:s3:::${local.eb_bucket_name}/resources/environments/${var.eb_environment_id}/*",
]
}
}