terraform: give archaeologist IAM policy permission to access cache_log bucket (#304)
Florian Klink committed
Nov 11, 2023 at 19:24 UTC
be6f1b594b6543e4132944e8729a00744c1c5cb8
1 file changed
+11
terraform-iam/archeologist.tf
+11
@@ -30,6 +30,17 @@ resource "aws_iam_policy" "archologist" {
30
"arn:aws:s3:::nix-releases-inventory220231029182031496800000001/*"
31
]
32
},
33
+ {
34
+ "Sid": "NixCacheLogsReadOnly",
35
+ "Effect": "Allow",
36
+ "Action": [
37
+ "s3:Get*"
38
+ ],
39
+ "Resource": [
40
+ "arn:aws:s3:::nix-cache-log",
41
+ "arn:aws:s3:::nix-cache-log/*"
42
+ ]
43
+ },
44
{
45
"Sid": "NixArcheologistReadWrite",
46
"Effect": "Allow",