Update S3 service policy to specify Principal as AWS object: Changed the Principal field in the S3 bucket policy to use an AWS object for improved security and clarity in permissions management.

Rykuno · Rykuno · commit 5bf37e263635 · 2026-02-19T23:50:20.000-06:00
diff --git a/apps/api/src/storage/s3.service.ts b/apps/api/src/storage/s3.service.ts
@@ -128,7 +128,7 @@ export class S3Service {
         {
           Sid: 'PublicReadGetObject',
           Effect: 'Allow',
-          Principal: '*',
+          Principal: { AWS: '*' },
           Action: ['s3:GetObject'],
           Resource: [`arn:aws:s3:::${bucketName}/*`],
         },

Original file line number	Diff line number	Diff line change
`@@ -128,7 +128,7 @@ export class S3Service {`
`128`	`128`	`{`
`129`	`129`	`Sid: 'PublicReadGetObject',`
`130`	`130`	`Effect: 'Allow',`
`131`		`- Principal: '*',`
	`131`	`+ Principal: { AWS: '*' },`
`132`	`132`	`Action: ['s3:GetObject'],`
`133`	`133`	Resource: [`arn:aws:s3:::${bucketName}/*`],
`134`	`134`	`},`