Merge pull request #241 from Sage-Bionetworks-Workflows/IT-3171-enabl…

…e-s3-ops-external Update policy to allow read write from external buckets
Sage-Bionetworks-Workflows · Sep 19, 2023 · 3a81a80 · 3a81a80
2 parents 634b962 + 2c3b620
commit 3a81a80
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/templates/tower-project.j2 b/templates/tower-project.j2
@@ -188,11 +188,14 @@ Resources:
       PolicyDocument:
         Version: "2012-10-17"
         Statement:
-          - Sid: ConditionalAmazonS3ReadOnlyAccess
+          - Sid: ConditionalAmazonS3ReadWriteAccess
             Effect: Allow
             Action:
               - "s3:Get*"
               - "s3:List*"
+              - "s3:PutObject*"
+              - "s3:DeleteObject*"
+              - "s3:*MultipartUpload*"
               - "s3-object-lambda:Get*"
               - "s3-object-lambda:List*"
             Resource: "*"