adam/shoc-backend
1
0
Fork 0
mirror of https://github.com/Sea-Haven-Industries/shoc-backend.git synced 2026-10-07 16:19:07 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

fix(iam): allow staging githubdeploy GetBucketPolicy on the EB bucket

Browse source
This commit is contained in:
Adam Moussa 2026-09-18 14:00:13 -04:00
parent 1cb095e8bf
commit f4d9a4a1b8
No known key found for this signature in database
1 changed files with 9 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
terraform/live/modules/environment-owned/main.tf
View file

@ -313,8 +313,15 @@ data "aws_iam_policy_document" "deploy" {
dynamic "statement" { dynamic "statement" {
for_each = local.use_legacy_s3_policy ? [] : [1] for_each = local.use_legacy_s3_policy ? [] : [1]
content { content {
effect = "Allow" effect = "Allow"
actions = ["s3:GetBucketLocation", "s3:ListBucket"] actions = [
"s3:GetBucketLocation",
"s3:ListBucket",
"s3:GetBucketPolicy",
"s3:GetBucketAcl",
"s3:GetBucketVersioning",
"s3:GetBucketOwnershipControls",
]
resources = ["arn:aws:s3:::${local.eb_bucket_name}"] resources = ["arn:aws:s3:::${local.eb_bucket_name}"]
} }
} }