Merge pull request #101 from communitiesuk/s3_permissions

Updating permissions
communitiesuk · Dec 8, 2023 · 6e00cf0 · 6e00cf0
2 parents 576186a + b136d36
commit 6e00cf0
Showing 1 changed file with 8 additions and 2 deletions.
diff --git a/apps/pre-award/copilot/environments/addons/form-uploads.yml b/apps/pre-award/copilot/environments/addons/form-uploads.yml
@@ -71,8 +71,12 @@ Resources:
                - s3:List*
                - s3:Describe*
                - s3:PutObject
+               - s3:PutObjectACL
+               - s3:DeleteObject
                - s3:ReplicateObject
-             Resource: !Sub ${ FormUploadsBucket.Arn }
+             Resource:
+               - !Sub ${ FormUploadsBucket.Arn }
+               - !Sub ${ FormUploadsBucket.Arn }/*
 
 Outputs:
   FormUploadsName:
@@ -86,5 +90,7 @@ Outputs:
     Export:
       Name: !Sub ${App}-${Env}-FormUploadsBucketARN
   FormsUploadBucketAccessPolicyArn:
-    Description: "The ARN of the Forms Upload bucket access policy"
+    Description: "The ARN of the Forms Upload bucket access policy to attach to the task role"
     Value: !Ref FormsUploadBucketAccessPolicy
+    Export:
+      Name: !Sub ${App}-${Env}-FormsUploadBucketAccessPolicyArn