Add S3:AbortMultipartUpload to AWS IAM policies (#13213)

* Add S3:AbortMultipartUploads to AWS IAM policies

Searched for all locations where s3:ListBucketMultipartUploads is currently required and added it.

* Fix permission name (it's singular)
This commit is contained in:
Gus Luxton
2022-06-07 12:28:12 +00:00
committed by GitHub
parent 472ea1bda7
commit 252ca62a76
5 changed files with 9 additions and 2 deletions
@@ -144,6 +144,7 @@ You'll need to replace these values in the policy example below:
"s3:GetObjectRetention",
"s3:ListBucketVersions",
"s3:ListBucketMultipartUploads",
"s3:AbortMultipartUpload",
"s3:CreateBucket",
"s3:ListBucket",
"s3:GetBucketVersioning",
+2
View File
@@ -731,6 +731,7 @@ Resources:
- "s3:ListBucket"
- "s3:ListBucketVersions"
- "s3:ListBucketMultipartUploads"
- "s3:AbortMultipartUpload"
-
Effect: "Allow"
@@ -818,6 +819,7 @@ Resources:
- "s3:ListBucket"
- "s3:ListBucketVersions"
- "s3:ListBucketMultipartUploads"
- "s3:AbortMultipartUpload"
-
Effect: "Allow"
+2
View File
@@ -731,6 +731,7 @@ Resources:
- "s3:ListBucket"
- "s3:ListBucketVersions"
- "s3:ListBucketMultipartUploads"
- "s3:AbortMultipartUpload"
-
Effect: "Allow"
@@ -818,6 +819,7 @@ Resources:
- "s3:ListBucket"
- "s3:ListBucketVersions"
- "s3:ListBucketMultipartUploads"
- "s3:AbortMultipartUpload"
-
Effect: "Allow"
@@ -136,7 +136,8 @@ resource "aws_iam_role_policy" "auth_s3" {
"Action": [
"s3:ListBucket",
"s3:ListBucketVersions",
"s3:ListBucketMultipartUploads"
"s3:ListBucketMultipartUploads",
"s3:AbortMultipartUpload"
],
"Resource": ["arn:aws:s3:::${aws_s3_bucket.certs.bucket}"]
},
@@ -44,7 +44,8 @@ resource "aws_iam_role_policy" "cluster_s3" {
"Action": [
"s3:ListBucket",
"s3:ListBucketVersions",
"s3:ListBucketMultipartUploads"
"s3:ListBucketMultipartUploads",
"s3:AbortMultipartUpload"
],
"Resource": ["arn:aws:s3:::${aws_s3_bucket.storage.bucket}"]
},