Commit bdb37e7 1 parent 12f337b commit bdb37e7 Copy full SHA for bdb37e7
File tree 1 file changed +21
-23
lines changed
1 file changed +21
-23
lines changed Original file line number Diff line number Diff line change @@ -19,25 +19,22 @@ resource "scaleway_object_bucket_policy" "policy" {
19
19
bucket = scaleway_object_bucket.bucket.name
20
20
policy = jsonencode(
21
21
{
22
- Id = "MyPolicy"
22
+ Version = "2023-04-17",
23
+ Id = "MyBucketPolicy",
23
24
Statement = [
24
25
{
25
- Action = [
26
- "s3:ListBucket",
27
- "s3:GetObject",
28
- ]
29
- Effect = "Allow"
26
+ Sid = "Delegate access",
27
+ Effect = "Allow",
30
28
Principal = {
31
- SCW = "*"
32
- }
33
- Resource = [
34
- "some-unique-name",
35
- "some-unique-name/*",
29
+ SCW = "application_id:<APPLICATION_ID>"
30
+ },
31
+ Action = "s3:ListBucket",
32
+ Resources = [
33
+ "${scaleway_object_bucket.bucket.name}",
34
+ "${scaleway_object_bucket.bucket.name}/*"
36
35
]
37
- Sid = "GrantToEveryone"
38
- },
36
+ }
39
37
]
40
- Version = "2012-10-17"
41
38
}
42
39
)
43
40
}
@@ -56,22 +53,23 @@ resource "scaleway_object_bucket_policy" "main" {
56
53
}
57
54
58
55
data "aws_iam_policy_document" "policy" {
59
- version = "2012-10-17"
56
+ version = "2023-04-17"
57
+ id = "MyBucketPolicy"
58
+
60
59
statement {
61
- sid = "MyPolicy"
60
+ sid = "Delegate access"
61
+ effect = "Allow"
62
+
62
63
principals {
63
64
type = "SCW"
64
- identifiers = ["project_id:<project_id >"]
65
+ identifiers = ["application_id:<APPLICATION_ID >"]
65
66
}
66
67
67
- actions = [
68
- "s3:GetObject",
69
- "s3:ListBucket",
70
- ]
68
+ actions = ["s3:ListBucket"]
71
69
72
70
resources = [
73
- "some-unique- name",
74
- "some-unique- name/*",
71
+ "${scaleway_object_bucket.bucket. name} ",
72
+ "${scaleway_object_bucket.bucket. name} /*"
75
73
]
76
74
}
77
75
}
You can’t perform that action at this time.
0 commit comments