fix(dfu): allow to get object

bifravst · Sep 17, 2019 · be69af7 · be69af7
1 parent 6e14ea1
commit be69af7
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/cdk/resources/DFUStorage.ts b/cdk/resources/DFUStorage.ts
@@ -31,7 +31,12 @@ export class DFUStorage extends CloudFormation.Resource {
 		userRole.addToPolicy(
 			new IAM.PolicyStatement({
 				resources: [`${this.bucket.bucketArn}/*`, this.bucket.bucketArn],
-				actions: ['s3:ListBucket', 's3:PutObject', 's3:DeleteObject'],
+				actions: [
+					's3:ListBucket',
+					's3:PutObject',
+					's3:GetObject',
+					's3:DeleteObject',
+				],
 			}),
 		)
 	}