Add more targeted AWS policy for Sippy (#18525)

* Add more targetted AWS policy for Sippy * update AWS policy
cloudflare · Dec 4, 2024 · e943f33 · e943f33
1 parent 6565e1b
commit e943f33
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/src/content/docs/r2/data-migration/sippy.mdx b/src/content/docs/r2/data-migration/sippy.mdx
@@ -245,8 +245,8 @@ To create credentials with the correct permissions:
 	"Statement": [
 		{
 			"Effect": "Allow",
-			"Action": ["s3:Get*", "s3:List*"],
-			"Resource": ["arn:aws:s3:::<BUCKET_NAME>", "arn:aws:s3:::<BUCKET_NAME>/*"]
+			"Action": ["s3:GetObject"],
+			"Resource": ["arn:aws:s3:::<BucketName>/*"]
 		}
 	]
 }