fix: set explicit permissions on s3 for syncer lambda (#2145)

philips-labs · Jun 14, 2022 · aa7edd1 · aa7edd1
1 parent 9e2a7b6
commit aa7edd1
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/modules/runner-binaries-syncer/policies/lambda-syncer.json b/modules/runner-binaries-syncer/policies/lambda-syncer.json
@@ -6,8 +6,8 @@
       "Action": [
         "s3:GetObjectTagging",
         "s3:GetObjectVersionTagging",
-        "s3:PutObject*",
-        "s3:RequestObjectTag*"
+        "s3:PutObject",
+        "s3:PutObjectTagging"
       ],
       "Resource": ["${s3_resource_arn}"]
     }