Raf/feature (#37)

* Fixing caches

* boo

* Permissions ftw!

Author: rferreira

lib/actions.js

@@ -17,6 +17,7 @@ const onFindings = async function (bucket, key, result) {
 
   const objectPath = utils.internalId(bucket, key);
   console.log(`RESULT: ${objectPath} has findings`, result.findings);
+  console.log(`actions delete: ${CONFIG.ACTION_DELETE_OBJECT} tag: ${CONFIG.ACTION_TAG_OBJECT}`);
 
   if (CONFIG.ACTION_TAG_OBJECT === true) {
     await tagObject(bucket, key, result);

template.yml

@@ -83,6 +83,10 @@ Resources:
             Effect: "Allow"
             Action:
               - "s3:DeleteObject"
+              - "s3:DeleteObjectTagging"
+              - "s3:GetObject"
+              - "s3:GetObjectTagging"
+              - "s3:GetObjectVersionTagging"
               - "s3:PutObjectTagging"
               - "s3:PutObjectVersionTagging"
             Resource: !Sub "arn:aws:s3:::${bucketName}/*"