allow access a shared folder in the ecs bucket (#2117)

Tian-2017 · web-flow · commit 16ff195faa67 · 2025-02-11T10:42:47.000Z
diff --git a/terraform/modules/department/50-aws-iam-policies.tf b/terraform/modules/department/50-aws-iam-policies.tf
@@ -221,7 +221,8 @@ data "aws_iam_policy_document" "s3_department_access" {
 
       var.mwaa_etl_scripts_bucket_arn,
       "${var.mwaa_etl_scripts_bucket_arn}/${local.department_identifier}/*",
-      "${var.mwaa_etl_scripts_bucket_arn}/${local.department_identifier}/unrestricted/*",
+      "${var.mwaa_etl_scripts_bucket_arn}/unrestricted/*",
+      "${var.mwaa_etl_scripts_bucket_arn}/shared/*",
     ]
   }
 

Original file line number	Diff line number	Diff line change
`@@ -221,7 +221,8 @@ data "aws_iam_policy_document" "s3_department_access" {`
`221`	`221`
`222`	`222`	`var.mwaa_etl_scripts_bucket_arn,`
`223`	`223`	`"${var.mwaa_etl_scripts_bucket_arn}/${local.department_identifier}/*",`
`224`		`- "${var.mwaa_etl_scripts_bucket_arn}/${local.department_identifier}/unrestricted/*",`
	`224`	`+ "${var.mwaa_etl_scripts_bucket_arn}/unrestricted/*",`
	`225`	`+ "${var.mwaa_etl_scripts_bucket_arn}/shared/*",`
`225`	`226`	`]`
`226`	`227`	`}`
`227`	`228`