diff --git a/terraform-iam/archeologist.tf b/terraform-iam/archeologist.tf index b643d38c..4b25c651 100644 --- a/terraform-iam/archeologist.tf +++ b/terraform-iam/archeologist.tf @@ -30,6 +30,17 @@ resource "aws_iam_policy" "archologist" { "arn:aws:s3:::nix-releases-inventory220231029182031496800000001/*" ] }, + { + "Sid": "NixCacheLogsReadOnly", + "Effect": "Allow", + "Action": [ + "s3:Get*" + ], + "Resource": [ + "arn:aws:s3:::nix-cache-log", + "arn:aws:s3:::nix-cache-log/*" + ] + }, { "Sid": "NixArcheologistReadWrite", "Effect": "Allow",