Merge pull request #1439 from alphagov/GOVUKAPP-577-permissions

s3 sync operation requires s3:ListBucket permission
alphagov · Aug 29, 2024 · 9504e9a · 9504e9a
2 parents 3ab2d7f + bff09eb
commit 9504e9a
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/terraform/deployments/mobile-backend/gha-iam-role.tf b/terraform/deployments/mobile-backend/gha-iam-role.tf
@@ -52,7 +52,8 @@ resource "aws_iam_role_policy" "config_signing" {
 data "aws_iam_policy_document" "bucket_write_role_permissions" {
   statement {
     actions = [
-      "s3:PutObject"
+      "s3:PutObject",
+      "s3:ListBucket"
     ]
     resources = [aws_s3_bucket.mobile_backend_remote_config.arn]
   }