Merge pull request #1440 from alphagov/mobile-backend-policy-fix

update GHA policy to include sub-resources
alphagov · Aug 30, 2024 · aa6f4ba · aa6f4ba
2 parents 9504e9a + bff551f
commit aa6f4ba
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/terraform/deployments/mobile-backend/gha-iam-role.tf b/terraform/deployments/mobile-backend/gha-iam-role.tf
@@ -55,7 +55,10 @@ data "aws_iam_policy_document" "bucket_write_role_permissions" {
       "s3:PutObject",
       "s3:ListBucket"
     ]
-    resources = [aws_s3_bucket.mobile_backend_remote_config.arn]
+    resources = [
+      aws_s3_bucket.mobile_backend_remote_config.arn,
+      "${aws_s3_bucket.mobile_backend_remote_config.arn}/*"
+    ]
   }
 }