terraform-iam: give more permission on the s3-archeologist bucket
zimbatm committed
Nov 3, 2023 at 12:56 UTC
041b45cc13e81c84d5056f55b8fb62a03ab33966
1 file changed
+1
-5
terraform-iam/archeologist.tf
+1
-5
@@ -33,11 +33,7 @@ resource "aws_iam_policy" "archologist" {
33
{
34
"Sid": "NixArcheologistReadWrite",
35
"Effect": "Allow",
36
- "Action": [
37
- "s3:Get*",
38
- "s3:List*",
39
- "s3:Put*"
40
- ],
36
+ "Action": [ "s3:*" ],
37
"Resource": [
38
"${aws_s3_bucket.archeologist.arn}",
39
"${aws_s3_bucket.archeologist.arn}/*"