Allow read/write access to versioned objects in s3 (#50)

dbl-works · Nov 13, 2021 · f546a93 · f546a93
1 parent 4c2b600
commit f546a93
Showing 1 changed file with 5 additions and 2 deletions.
diff --git a/ecs/execution-role.tf b/ecs/execution-role.tf
@@ -60,7 +60,8 @@ locals {
     "Effect" : "Allow",
     "Action" : [
       "s3:ListBucket",
-      "s3:GetObject"
+      "s3:GetObject",
+      "s3:GetObjectVersion"
     ],
     "Resource" : var.grant_read_access_to_s3_arns
   }] : []
@@ -70,8 +71,10 @@ locals {
     "Action" : [
       "s3:ListBucket",
       "s3:GetObject",
+      "s3:GetObjectVersion",
       "s3:PutObject",
-      "s3:DeleteObject"
+      "s3:DeleteObject",
+      "s3:DeleteObjectVersion"
     ],
     "Resource" : var.grant_write_access_to_s3_arns
   }] : []