clarify minimal permissions

treeverse · Oct 29, 2024 · 62e38ea · 62e38ea
1 parent 9e8a43b
commit 62e38ea
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/docs/howto/garbage-collection/standalone-gc.md b/docs/howto/garbage-collection/standalone-gc.md
@@ -74,6 +74,7 @@ docker pull treeverse/lakefs-sgc:<tag>
 
 ### Permissions
 To run `lakefs-sgc`, you'll need AWS and LakeFS users, with the following permissions:
+
 #### AWS
 The minimal required permissions on AWS are:
 ```json
@@ -87,7 +88,7 @@ The minimal required permissions on AWS are:
         "s3:GetObject"
       ],
       "Resource": [
-        "arn:aws:s3:::<bucket>/*"
+        "arn:aws:s3:::some-bucket/some/prefix/*"
       ]
     },
     {
@@ -96,7 +97,7 @@ The minimal required permissions on AWS are:
         "s3:ListBucket"
       ],
       "Resource": [
-        "arn:aws:s3:::<bucket>"
+        "arn:aws:s3:::some-bucket"
       ]
     },
     {
@@ -111,6 +112,7 @@ The minimal required permissions on AWS are:
   ]
 }
 ```
+In this permissions file, the example repository storage namespace is `s3://some-bucket/some/prefix`.
 
 #### LakeFS
 The minimal required permissions on LakeFS are: