fix: missing permissions

pixelfusion · Jul 25, 2023 · f95d6d2 · f95d6d2
1 parent 35b0e43
commit f95d6d2
Showing 1 changed file with 20 additions and 2 deletions.
diff --git a/gatsby-plugin-s3-e2e-tests-infrastructure/test-policy.json b/gatsby-plugin-s3-e2e-tests-infrastructure/test-policy.json
@@ -7,7 +7,10 @@
             "Action": [
                 "s3:CreateBucket",
                 "s3:PutBucketPolicy",
-                "s3:DeleteBucket"
+                "s3:DeleteBucket",
+                "s3:PutBucketAcl",
+                "s3:PutBucketPublicAccessBlock",
+                "s3:PutBucketWebsite"
             ],
             "Resource": "arn:aws:s3:::gatsby-plugin-s3-tests-*",
             "Condition": {
@@ -21,7 +24,9 @@
             "Effect": "Allow",
             "Action": [
                 "s3:GetObject",
-                "s3:DeleteObject"
+                "s3:DeleteObject",
+                "s3:PutObject",
+                "s3:PutObjectAcl"
             ],
             "Resource": "arn:aws:s3:::gatsby-plugin-s3-tests-*/*",
             "Condition": {
@@ -74,6 +79,19 @@
                 }
             }
         },
+        {
+            "Sid": "PutBucketPublicAccessBlock",
+            "Effect": "Allow",
+            "Action": [
+                "s3:PutBucketPublicAccessBlock"
+            ],
+            "Resource": "arn:aws:s3:::gatsby-plugin-s3-tests-*",
+            "Condition": {
+                "StringLike": {
+                    "aws:UserAgent": "*TestPerms*PutBucketPublicAccessBlock*"
+                }
+            }
+        },
         {
             "Sid": "PutBucketAcl",
             "Effect": "Allow",