Skip to content

Commit

Permalink
cryo: Enable access to veda & ghg buckets
Browse files Browse the repository at this point in the history 
Ref https://2i2c.freshdesk.com/a/tickets/1547
  • Loading branch information
@yuvipanda
yuvipanda committed May 13, 2024
1 parent 2b63652 commit 63a7a1b
Showing 1 changed file with 24 additions and 57 deletions.
81 changes: 24 additions & 57 deletions terraform/aws/projects/nasa-cryo.tfvars
View file
Original file line number Diff line number Diff line change
Expand Up @@ -24,7 +24,9 @@ hub_cloud_permissions = {
"staging" : {
"user-sa" : {
bucket_admin_access : ["scratch-staging", "persistent-staging"],
# Provides readonly requestor-pays access to usgs-landsat bucket
# Provides readonly requestor-pays access to usgs-landsat bucket,
# veda bucket (https://2i2c.freshdesk.com/a/tickets/1547) and sliderule
# bucket (https://2i2c.freshdesk.com/a/tickets/1508).
# FIXME: We should find a way to allow access to *all* requester pays
# buckets, without having to explicitly list them. However, we don't want
# to give access to all *internal* s3 buckets willy-nilly - this can be
Expand All @@ -40,34 +42,17 @@ hub_cloud_permissions = {
"s3:*"
],
"Resource": [
"arn:aws:s3:::usgs-landsat"
]
},
{
"Effect": "Allow",
"Action": [
"s3:*"
],
"Resource": [
"arn:aws:s3:::usgs-landsat/*"
]
},
{
"Effect": "Allow",
"Action": [
"s3:*"
],
"Resource": [
"arn:aws:s3:::sliderule-public"
]
},
{
"Effect": "Allow",
"Action": [
"s3:*"
],
"Resource": [
"arn:aws:s3:::sliderule-public/*"
"arn:aws:s3:::usgs-landsat",
"arn:aws:s3:::usgs-landsat/*",
"arn:aws:s3:::sliderule-public",
"arn:aws:s3:::sliderule-public/*",
"arn:aws:s3:::veda-data-store",
"arn:aws:s3:::veda-data-store/*",
"arn:aws:s3:::veda-data-store-staging",
"arn:aws:s3:::veda-data-store-staging/*",
"arn:aws:s3:::ghgc-data-store",
"arn:aws:s3:::ghgc-data-store/*"
]
}
]
Expand All @@ -94,34 +79,16 @@ hub_cloud_permissions = {
"s3:*"
],
"Resource": [
"arn:aws:s3:::usgs-landsat"
]
},
{
"Effect": "Allow",
"Action": [
"s3:*"
],
"Resource": [
"arn:aws:s3:::usgs-landsat/*"
]
},
{
"Effect": "Allow",
"Action": [
"s3:*"
],
"Resource": [
"arn:aws:s3:::sliderule-public"
]
},
{
"Effect": "Allow",
"Action": [
"s3:*"
],
"Resource": [
"arn:aws:s3:::sliderule-public/*"
"arn:aws:s3:::usgs-landsat",
"arn:aws:s3:::usgs-landsat/*",
"arn:aws:s3:::sliderule-public",
"arn:aws:s3:::sliderule-public/*",
"arn:aws:s3:::veda-data-store",
"arn:aws:s3:::veda-data-store/*",
"arn:aws:s3:::veda-data-store-staging",
"arn:aws:s3:::veda-data-store-staging/*",
"arn:aws:s3:::ghgc-data-store",
"arn:aws:s3:::ghgc-data-store/*"
]
}
]
Expand Down

0 comments on commit 63a7a1b

Please sign in to comment.