Skip to content

Commit 23f1699

Browse files
[ODSC-74843] ORM stack update (#608)
* Updating ORM stack * Addressing review comments
1 parent 91396e7 commit 23f1699

File tree

1 file changed

+1
-2
lines changed
  • ai-quick-actions/policies/terraform

1 file changed

+1
-2
lines changed

ai-quick-actions/policies/terraform/iam.tf

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -74,7 +74,6 @@ locals {
7474

7575
all_buckets = concat(var.user_model_buckets, var.user_data_buckets)
7676
bucket_names = join(", ", formatlist("target.bucket.name='%s'", local.all_buckets))
77-
bucket_names_oss = join(", ", formatlist("all{target.bucket.name='%s', any {request.permission='OBJECT_CREATE', request.permission='OBJECT_INSPECT'}}", local.all_buckets))
7877
dt_jr_policies = local.is_resource_policy_required?[
7978
"Allow dynamic-group id ${oci_identity_dynamic_group.distributed_training_job_runs[0].id} to use logging-family in ${local.compartment_policy_string}",
8079
"Allow dynamic-group id ${oci_identity_dynamic_group.distributed_training_job_runs[0].id} to manage data-science-models in ${local.compartment_policy_string}",
@@ -85,7 +84,7 @@ locals {
8584
"Allow dynamic-group id ${oci_identity_dynamic_group.distributed_training_job_runs[0].id} to read buckets in ${local.compartment_policy_string} where any {${local.bucket_names}}"
8685
]: []
8786
aqua_policies_target_buckets = local.is_resource_policy_required?[
88-
"Allow dynamic-group id ${oci_identity_dynamic_group.aqua-dynamic-group[0].id} to manage object-family in ${local.compartment_policy_string} where any {${local.bucket_names_oss}}"
87+
"Allow dynamic-group id ${oci_identity_dynamic_group.aqua-dynamic-group[0].id} to manage object-family in ${local.compartment_policy_string} where any {${local.bucket_names}}"
8988
]:[]
9089

9190
}

0 commit comments

Comments
 (0)