Munge bucket policy

beggers · Mar 4, 2024 · 04b784c · 04b784c
1 parent 6708986
commit 04b784c
Showing 1 changed file with 2 additions and 15 deletions.
diff --git a/terraform/iam.tf b/terraform/iam.tf
@@ -20,21 +20,7 @@ data "aws_iam_policy_document" "website_policy" {
     actions = [
       "s3:DeleteObject",
       "s3:PutObject",
-      "s3:GetObject"
-    ]
-    effect = "Allow"
-    principals {
-      type = "AWS"
-      identifiers = [
-        aws_iam_role.github_actions.arn
-      ]
-    }
-    resources = [
-      "${aws_s3_bucket.main.arn}/*"
-    ]
-  }
-  statement {
-    actions = [
+      "s3:GetObject",
       "s3:ListBucket"
     ]
     effect = "Allow"
@@ -45,6 +31,7 @@ data "aws_iam_policy_document" "website_policy" {
       ]
     }
     resources = [
+      "${aws_s3_bucket.main.arn}/*",
       "${aws_s3_bucket.main.arn}"
     ]
   }