Add more targetted AWS policy for Sippy

harshil1712 · harshil1712 · commit f9022412997a · 2024-12-03T17:32:10.000+05:30
diff --git a/src/content/docs/r2/data-migration/sippy.mdx b/src/content/docs/r2/data-migration/sippy.mdx
@@ -245,7 +245,7 @@ To create credentials with the correct permissions:
 	"Statement": [
 		{
 			"Effect": "Allow",
-			"Action": ["s3:Get*", "s3:List*"],
+			"Action": ["s3:GetObject", "s3:ListObject", "s3:HeadObject"],
 			"Resource": ["arn:aws:s3:::<BUCKET_NAME>", "arn:aws:s3:::<BUCKET_NAME>/*"]
 		}
 	]

Original file line number	Diff line number	Diff line change
`@@ -245,7 +245,7 @@ To create credentials with the correct permissions:`
`245`	`245`	`"Statement": [`
`246`	`246`	`{`
`247`	`247`	`"Effect": "Allow",`
`248`		`- "Action": ["s3:Get", "s3:List"],`
	`248`	`+ "Action": ["s3:GetObject", "s3:ListObject", "s3:HeadObject"],`
`249`	`249`	`"Resource": ["arn:aws:s3:::<BUCKET_NAME>", "arn:aws:s3:::<BUCKET_NAME>/*"]`
`250`	`250`	`}`
`251`	`251`	`]`