chore(deployment) : Fix sources object access

It seems reasonable that the Airflow DAGs would access the sources folder and can get object properties in it.
gip-inclusion · Aug 13, 2024 · 01b6dd4 · 01b6dd4
1 parent 41ed26a
commit 01b6dd4
Showing 1 changed file with 15 additions and 0 deletions.
diff --git a/deployment/main.tf b/deployment/main.tf
@@ -103,6 +103,21 @@ resource "scaleway_object_bucket_policy" "main" {
             "${scaleway_object_bucket.main.name}/data/*",
           ]
         },
+        {
+          Effect = "Allow",
+          Sid    = "Grant list & read in sources/* to airflow",
+          Principal = {
+            SCW = ["application_id:${var.airflow_application_id}"]
+          },
+          Action = [
+            "s3:ListBucket",
+            "s3:GetObject"
+          ],
+          Resource = [
+            "${scaleway_object_bucket.main.name}",
+            "${scaleway_object_bucket.main.name}/sources/*",
+          ]
+        },
         {
           Effect = "Allow",
           Sid    = "Grant list & read in data/marts/* to the api",