joe/everytab
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

allow ec2 to access common crawl s3

Browse source
This commit is contained in:
Joe Lothan 2026-05-17 18:22:41 -04:00
parent fcf203e1d8
commit 65d2757527
1 changed files with 20 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

14
infra/main.tf
View file

@ -141,7 +141,8 @@ resource "aws_iam_role_policy" "s3_access" {
policy = jsonencode({ policy = jsonencode({
Version = "2012-10-17" Version = "2012-10-17"
Statement = [{ Statement = [
{
Effect = "Allow" Effect = "Allow"
Action = ["s3:GetObject", "s3:PutObject", "s3:DeleteObject", "s3:ListBucket", "s3:HeadObject"] Action = ["s3:GetObject", "s3:PutObject", "s3:DeleteObject", "s3:ListBucket", "s3:HeadObject"]
Resource = [ Resource = [
@ -150,7 +151,16 @@ resource "aws_iam_role_policy" "s3_access" {
aws_s3_bucket.site.arn, aws_s3_bucket.site.arn,
"${aws_s3_bucket.site.arn}/*", "${aws_s3_bucket.site.arn}/*",
] ]
}] },
{
Effect = "Allow"
Action = ["s3:GetObject", "s3:ListBucket"]
Resource = [
"arn:aws:s3:::commoncrawl",
"arn:aws:s3:::commoncrawl/*",
]
}
]
}) })
} }