fix: allow github keys to get s3 object versions

xtdb · May 31, 2024 · 60bbe3c · 60bbe3c
1 parent 2ec781b
commit 60bbe3c
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/cloudformation/00-github-keys.yml b/cloudformation/00-github-keys.yml
@@ -25,14 +25,14 @@ Resources:
                   - ssm:Get*
                   - ssm:List*
                 Resource: !Sub "arn:aws:ssm:${AWS::Region}:${AWS::AccountId}:parameter/xt-play_*"
-        - PolicyName: s3-upload
+        - PolicyName: s3
           PolicyDocument:
             Version: '2012-10-17'
             Statement:
-              - Sid: RegisterTaskDefinition
-                Effect: Allow
+              - Effect: Allow
                 Action:
                   - s3:PutObject
+                  - s3:GetObjectVersion
                 Resource:
                   - arn:aws:s3:::xt-play-lambda-code
                   - arn:aws:s3:::xt-play-lambda-code/*