attach S3 access for guests to group not user (#372)

dbl-works · Jan 15, 2025 · c5e2065 · c5e2065
1 parent 73671df
commit c5e2065
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/aws/s3-shared/guest-iam.tf b/aws/s3-shared/guest-iam.tf
@@ -28,9 +28,9 @@ data "aws_iam_policy_document" "s3" {
   }
 }
 
-resource "aws_iam_user_policy" "s3" {
+resource "aws_iam_group_policy" "s3" {
   name   = "s3-access-for-${module.s3.bucket_name}"
-  user   = aws_iam_user.guest.name
+  group  = "guest-humans"
   policy = data.aws_iam_policy_document.s3.json
 }