🔧 Fix IAM Permissions issue

openclimatefix · May 29, 2020 · 8b9d218 · 8b9d218
1 parent d0c4d62
commit 8b9d218
Showing 1 changed file with 23 additions and 12 deletions.
diff --git a/infrastructure/ecs.tf b/infrastructure/ecs.tf
@@ -31,28 +31,39 @@ resource "aws_iam_policy" "metoffice_task_policy" {
     "Version": "2012-10-17",
     "Statement": [
         {
-            "Sid": "",
+            "Sid": "sqs",
             "Effect": "Allow",
             "Action": [
                 "sqs:DeleteMessage",
                 "sqs:GetQueueUrl",
                 "sqs:ReceiveMessage",
                 "sqs:GetQueueAttributes",
-                "s3:ListBucket",
                 "sqs:ListQueueTags",
-                "s3:ReplicateObject",
-                "s3:PutObject",
-                "s3:GetObject",
-                "s3:GetObjectTorrent",
                 "sqs:ListDeadLetterSourceQueues",
-                "s3:AbortMultipartUpload",
-                "sqs:DeleteMessageBatch",
-                "s3:GetObjectVersionAcl",
-                "s3:GetObjectVersion"
+                "sqs:DeleteMessageBatch"
+            ],
+            "Resource": [
+              "${aws_sqs_queue.metqueue.arn}"
+            ]
+        },
+        {
+            "Sid": "s3_bucket",
+            "Effect": "Allow",
+            "Action": [
+                "s3:ListBucket"
+            ],
+            "Resource": [
+                "${aws_s3_bucket.output.arn}"
+            ]
+        },
+        {
+            "Sid": "s3_files",
+            "Effect": "Allow",
+            "Action": [
+                "s3:PutObject",
+                "s3:GetObject"
             ],
             "Resource": [
-                "${aws_sqs_queue.metqueue.arn}",
-                "${aws_s3_bucket.output.arn}",
                 "${aws_s3_bucket.output.arn}/*"
             ]
         }