s3:ListBucket needs to be applied to bucket

spack · Oct 31, 2024 · 2478eb4 · 2478eb4
1 parent bd0c3ee
commit 2478eb4
Showing 1 changed file with 10 additions and 1 deletion.
diff --git a/terraform/modules/spack_aws_k8s/bootstrap_s3.tf b/terraform/modules/spack_aws_k8s/bootstrap_s3.tf
@@ -38,11 +38,20 @@ resource "aws_s3_bucket_policy" "bootstrap" {
         "Action" : [
           "s3:DeleteObject*",
           "s3:GetObject*",
-          "s3:ListBucket*",
           "s3:PutObject*"
         ],
         "Resource" : "arn:aws:s3:::${aws_s3_bucket.bootstrap.bucket}/pcluster/*"
+      },
+      {
+        "Sid" : "StephenSachsEnableSync",
+        "Effect" : "Allow",
+        "Principal" : {
+          "AWS" : "arn:aws:iam::679174810898:root"
+        },
+        "Action" : "s3:ListBucket*",
+        "Resource" : "arn:aws:s3:::${aws_s3_bucket.bootstrap.bucket}"
       }
+
     ]
   })