Skip to content

Commit 5315ca5

Browse files
authored
VPC: Allow access to installation specific etcd backup buckets. (#764)
1 parent 6d2c6ec commit 5315ca5

File tree

1 file changed

+6
-1
lines changed

1 file changed

+6
-1
lines changed

modules/aws/vpc/vpc.tf

+6-1
Original file line numberDiff line numberDiff line change
@@ -48,7 +48,12 @@ EOF
4848
"Principal": "*",
4949
"Action": "*",
5050
"Effect": "Allow",
51-
"Resource": ["arn:${var.arn_region}:s3:::etcd-backups.giantswarm.io/*", "arn:${var.arn_region}:s3:::etcd-backups.giantswarm.io"]
51+
"Resource": [
52+
"arn:${var.arn_region}:s3:::etcd-backups.giantswarm.io",
53+
"arn:${var.arn_region}:s3:::etcd-backups.giantswarm.io/*",
54+
"arn:${var.arn_region}:s3:::${var.cluster_name}-etcd-backups",
55+
"arn:${var.arn_region}:s3:::${var.cluster_name}-etcd-backups/*"
56+
]
5257
},
5358
{
5459
"Sid": "CAPA",

0 commit comments

Comments
 (0)