Skip to content

Commit 9e319e3

Browse files
committed
Unrevert the code
1 parent acba5e7 commit 9e319e3

File tree

1 file changed

+7
-2
lines changed

1 file changed

+7
-2
lines changed

main.tf

Lines changed: 7 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -254,11 +254,16 @@ data "aws_iam_policy_document" "default" {
254254
sid = "AllowS3OperationsOnElasticBeanstalkBuckets"
255255

256256
actions = [
257-
"s3:*"
257+
"s3:PutObject",
258+
"s3:ListBucketVersions",
259+
"s3:ListBucket",
260+
"s3:GetObjectVersion",
261+
"s3:GetObject"
258262
]
259263

260264
resources = [
261-
"arn:aws:s3:::*"
265+
"arn:aws:s3:::${var.namespace}-${var.stage}-bucket/*",
266+
"arn:aws:s3:::${var.namespace}-${var.stage}-bucket",
262267
]
263268

264269
effect = "Allow"

0 commit comments

Comments
 (0)