add athena storage actions (#2531)

timburke-hackit · web-flow · commit d07923ba9b53 · 2025-10-30T16:18:46.000Z
diff --git a/terraform/core/24-qlik-iam.tf b/terraform/core/24-qlik-iam.tf
@@ -132,4 +132,17 @@ data "aws_iam_policy_document" "qlik_can_read_from_s3_and_athena" {
       "*"
     ]
   }
+
+  statement {
+    effect = "Allow"
+    actions = [
+      "s3:GetBucketLocation",
+      "s3:ListBucket",
+      "s3:GetBucketVersioning"
+    ]
+    resources = [
+      module.athena_storage.bucket_arn,
+    ]
+  }
 }
+

Original file line number	Diff line number	Diff line change
`@@ -132,4 +132,17 @@ data "aws_iam_policy_document" "qlik_can_read_from_s3_and_athena" {`
`132`	`132`	`"*"`
`133`	`133`	`]`
`134`	`134`	`}`
	`135`	`+`
	`136`	`+ statement {`
	`137`	`+ effect = "Allow"`
	`138`	`+ actions = [`
	`139`	`+ "s3:GetBucketLocation",`
	`140`	`+ "s3:ListBucket",`
	`141`	`+ "s3:GetBucketVersioning"`
	`142`	`+ ]`
	`143`	`+ resources = [`
	`144`	`+ module.athena_storage.bucket_arn,`
	`145`	`+ ]`
	`146`	`+ }`
`135`	`147`	`}`
	`148`	`+`