Fastly logs bucket policy to give the fastly-log-processor user access (#398)
Eelco Dolstra committed
Mar 5, 2024 at 16:53 UTC
adb4efc9a214cfded3f62abdc2364c56d2b57e86
1 file changed
+9
-12
terraform-iam/fastlylog/main.tf
+9
-12
@@ -31,19 +31,16 @@ resource "aws_s3_bucket_policy" "logs" {
31
"Sid": "AllowNixOSOrgRead",
32
"Effect": "Allow",
33
"Principal": {
34
- "AWS": "arn:aws:iam::008826681144:user/eelco.dolstra"
34
+ "AWS": "arn:aws:iam::008826681144:user/fastly-log-processor"
35
},
36
- "Action": "s3:GetObject",
37
- "Resource": "arn:aws:s3:::${aws_s3_bucket.logs.id}/*"
38
- },
39
- {
40
- "Sid": "AllowNixOSOrgList",
41
- "Effect": "Allow",
42
- "Principal": {
43
- "AWS": "arn:aws:iam::008826681144:user/eelco.dolstra"
44
- },
45
- "Action": "s3:ListBucket",
46
- "Resource": "arn:aws:s3:::${aws_s3_bucket.logs.id}"
36
+ "Action": [
37
+ "s3:GetObject",
38
+ "s3:ListBucket"
39
+ ],
40
+ "Resource": [
41
+ "arn:aws:s3:::${aws_s3_bucket.logs.id}/*",
42
+ "arn:aws:s3:::${aws_s3_bucket.logs.id}"
43
+ ]
44
}
45
]
46
}