fix: use resource for s3 list bucket

ceramicnetwork · May 20, 2021 · 569b8ad · 569b8ad
1 parent 56d6151
commit 569b8ad
Show file tree

Hide file tree

Showing 2 changed files with 22 additions and 2 deletions.
diff --git a/modules/ecs/ceramic/templates/state_store_s3_policy.json.tpl b/modules/ecs/ceramic/templates/state_store_s3_policy.json.tpl
@@ -2,8 +2,8 @@
   "Version": "2012-10-17",
   "Statement": [
     {
+      "Sid": "readwrite",
       "Action": [
-        "s3:ListBucket",
         "s3:GetObject",
         "s3:PutObject",
         "s3:DeleteObject"
@@ -13,6 +13,16 @@
           "${resource}/${directory}",
           "${resource}/${directory}/*"
       ]
+    },
+    {
+      "Sid": "readonly",
+      "Action": [
+        "s3:ListBucket"
+      ],
+      "Effect": "Allow",
+      "Resource": [
+          "${resource}"
+      ]
     }
   ]
 }
diff --git a/modules/ecs/ipfs/templates/s3_policy.json.tpl b/modules/ecs/ipfs/templates/s3_policy.json.tpl
@@ -2,9 +2,9 @@
   "Version": "2012-10-17",
   "Statement": [
     {
+      "Sid": "readwrite",
       "Action": [
         "s3:GetObject",
-        "s3:ListBucket",
         "s3:PutObject",
         "s3:DeleteObject"
       ],
@@ -13,6 +13,16 @@
           "${resource}/${directory}",
           "${resource}/${directory}/*"
       ]
+    },
+    {
+      "Sid": "readonly",
+      "Action": [
+        "s3:ListBucket"
+      ],
+      "Effect": "Allow",
+      "Resource": [
+          "${resource}"
+      ]
     }
   ]
 }