joe/everytab
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

allow ec2 to access common crawl s3

Browse source
This commit is contained in:
Joe Lothan 2026-05-17 18:22:41 -04:00
parent fcf203e1d8
commit 65d2757527
1 changed files with 20 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

30
infra/main.tf
View file

@ -141,16 +141,26 @@ resource "aws_iam_role_policy" "s3_access" {
policy = jsonencode({ policy = jsonencode({
Version = "2012-10-17" Version = "2012-10-17"
Statement = [{ Statement = [
Effect = "Allow" {
Action = ["s3:GetObject", "s3:PutObject", "s3:DeleteObject", "s3:ListBucket", "s3:HeadObject"] Effect = "Allow"
Resource = [ Action = ["s3:GetObject", "s3:PutObject", "s3:DeleteObject", "s3:ListBucket", "s3:HeadObject"]
aws_s3_bucket.icons[0].arn, Resource = [
"${aws_s3_bucket.icons[0].arn}/*", aws_s3_bucket.icons[0].arn,
aws_s3_bucket.site.arn, "${aws_s3_bucket.icons[0].arn}/*",
"${aws_s3_bucket.site.arn}/*", aws_s3_bucket.site.arn,
] "${aws_s3_bucket.site.arn}/*",
}] ]
},
{
Effect = "Allow"
Action = ["s3:GetObject", "s3:ListBucket"]
Resource = [
"arn:aws:s3:::commoncrawl",
"arn:aws:s3:::commoncrawl/*",
]
}
]
}) })
} }