Update main.tf to ensure bucket access for nodes (#92)

ioos · Jun 12, 2024 · 3153da3 · 3153da3
1 parent c93a2ff
commit 3153da3
Showing 1 changed file with 12 additions and 0 deletions.
diff --git a/terraform/main.tf b/terraform/main.tf
@@ -27,6 +27,18 @@ resource "aws_iam_role" "sandbox_iam_role" {
           },
           "Effect" : "Allow",
           "Sid" : ""
+        },
+        {
+            "Sid": "ListObjectsInBucket",
+            "Effect": "Allow",
+            "Action": ["s3:ListBucket"],
+            "Resource": ["arn:aws:s3:::ioos-coastalsb-*puts"]
+        },
+        {
+            "Sid": "AllObjectActions",
+            "Effect": "Allow",
+            "Action": "s3:*Object",
+            "Resource": ["arn:aws:s3:::ioos-coastalsb-*puts/*"]
         }
       ]
   })