mirror of
https://github.com/gravitational/teleport.git
synced 2026-09-21 05:55:42 +08:00
Add S3:AbortMultipartUpload to AWS IAM policies (#13213)
* Add S3:AbortMultipartUploads to AWS IAM policies Searched for all locations where s3:ListBucketMultipartUploads is currently required and added it. * Fix permission name (it's singular)
This commit is contained in:
@@ -144,6 +144,7 @@ You'll need to replace these values in the policy example below:
|
||||
"s3:GetObjectRetention",
|
||||
"s3:ListBucketVersions",
|
||||
"s3:ListBucketMultipartUploads",
|
||||
"s3:AbortMultipartUpload",
|
||||
"s3:CreateBucket",
|
||||
"s3:ListBucket",
|
||||
"s3:GetBucketVersioning",
|
||||
|
||||
@@ -731,6 +731,7 @@ Resources:
|
||||
- "s3:ListBucket"
|
||||
- "s3:ListBucketVersions"
|
||||
- "s3:ListBucketMultipartUploads"
|
||||
- "s3:AbortMultipartUpload"
|
||||
|
||||
-
|
||||
Effect: "Allow"
|
||||
@@ -818,6 +819,7 @@ Resources:
|
||||
- "s3:ListBucket"
|
||||
- "s3:ListBucketVersions"
|
||||
- "s3:ListBucketMultipartUploads"
|
||||
- "s3:AbortMultipartUpload"
|
||||
|
||||
-
|
||||
Effect: "Allow"
|
||||
|
||||
@@ -731,6 +731,7 @@ Resources:
|
||||
- "s3:ListBucket"
|
||||
- "s3:ListBucketVersions"
|
||||
- "s3:ListBucketMultipartUploads"
|
||||
- "s3:AbortMultipartUpload"
|
||||
|
||||
-
|
||||
Effect: "Allow"
|
||||
@@ -818,6 +819,7 @@ Resources:
|
||||
- "s3:ListBucket"
|
||||
- "s3:ListBucketVersions"
|
||||
- "s3:ListBucketMultipartUploads"
|
||||
- "s3:AbortMultipartUpload"
|
||||
|
||||
-
|
||||
Effect: "Allow"
|
||||
|
||||
@@ -136,7 +136,8 @@ resource "aws_iam_role_policy" "auth_s3" {
|
||||
"Action": [
|
||||
"s3:ListBucket",
|
||||
"s3:ListBucketVersions",
|
||||
"s3:ListBucketMultipartUploads"
|
||||
"s3:ListBucketMultipartUploads",
|
||||
"s3:AbortMultipartUpload"
|
||||
],
|
||||
"Resource": ["arn:aws:s3:::${aws_s3_bucket.certs.bucket}"]
|
||||
},
|
||||
|
||||
@@ -44,7 +44,8 @@ resource "aws_iam_role_policy" "cluster_s3" {
|
||||
"Action": [
|
||||
"s3:ListBucket",
|
||||
"s3:ListBucketVersions",
|
||||
"s3:ListBucketMultipartUploads"
|
||||
"s3:ListBucketMultipartUploads",
|
||||
"s3:AbortMultipartUpload"
|
||||
],
|
||||
"Resource": ["arn:aws:s3:::${aws_s3_bucket.storage.bucket}"]
|
||||
},
|
||||
|
||||
Reference in New Issue
Block a user