From 0bb2205ddfa37addd800223cf3bdcf47c822dfae Mon Sep 17 00:00:00 2001 From: Jean Schmidt <4520845+jeanschmidt@users.noreply.github.com> Date: Wed, 17 May 2023 15:41:12 +0200 Subject: [PATCH] list buckets is required for new ansible rules (#4174) --- .../runners-instances/policies/instance-s3-policy.json | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/terraform-aws-github-runner/modules/runners-instances/policies/instance-s3-policy.json b/terraform-aws-github-runner/modules/runners-instances/policies/instance-s3-policy.json index 68d21ebce6..4d20c42d3e 100644 --- a/terraform-aws-github-runner/modules/runners-instances/policies/instance-s3-policy.json +++ b/terraform-aws-github-runner/modules/runners-instances/policies/instance-s3-policy.json @@ -6,6 +6,11 @@ "Effect": "Allow", "Action": ["s3:GetObject", "s3:GetObjectAcl"], "Resource": ["${s3_arn}/*"] - } + }, + { + "Effect":"Allow", + "Action":["s3:ListBucket","s3:GetBucketLocation"], + "Resource":"${s3_arn}" + } ] }