aboutsummaryrefslogtreecommitdiffstats
path: root/terraform/iam.tf
diff options
context:
space:
mode:
Diffstat (limited to 'terraform/iam.tf')
-rw-r--r--terraform/iam.tf9
1 files changed, 6 insertions, 3 deletions
diff --git a/terraform/iam.tf b/terraform/iam.tf
index 3ac8c45..3d62b69 100644
--- a/terraform/iam.tf
+++ b/terraform/iam.tf
@@ -41,7 +41,8 @@ data "aws_iam_policy_document" "s3_data_policy_doc" {
"s3:PutObjectTagging",
"s3:PutObjectAcl",
"s3:ListObjects",
- "s3:ListObjectsV2"
+ "s3:ListObjectsV2",
+ "s3:GetObject"
]
resources = [
"${aws_s3_bucket.extract_bucket.arn}/*",
@@ -53,8 +54,10 @@ data "aws_iam_policy_document" "s3_data_policy_doc" {
statement {
effect = "Allow"
actions = [
- "s3:ListBuckets",
- "s3:ListAllMyBuckets"
+ "s3:ListBucket",
+ "s3:ListAllMyBuckets",
+ "s3:ListObjectsV2",
+ "s3:ListObjects"
]
resources = [
"arn:aws:s3:::*",
git.ajschof.me — hosted by ajschofield — powered by cgit