grant permissions to all buckets

broadinstitute · Jun 20, 2024 · 27b6e44 · 27b6e44
1 parent f1ea927
commit 27b6e44
Showing 1 changed file with 5 additions and 6 deletions.
diff --git a/batch-compression-management/bgz.yml b/batch-compression-management/bgz.yml
@@ -170,12 +170,11 @@ Resources:
             Action:
               - 's3:ListBucket'
               - 's3:GetBucketLocation'
-            Resource: 'arn:aws:s3:::dig-bio-index'
-          - Effect: Allow
-            Action:
               - 's3:PutObject'
               - 's3:GetObject'
-            Resource: 'arn:aws:s3:::dig-bio-index/*'
+            Resource:
+              - 'arn:aws:s3:::*'
+              - 'arn:aws:s3:::*/*'
 
   # store this so it can be retrieved by the indexing and compression job
   BgzipCompressionSecret:
@@ -216,8 +215,8 @@ Resources:
                   - 's3:PutObject'
                   - 's3:DeleteObject'
                 Resource:
-                  - 'arn:aws:s3:::dig-bio-index'
-                  - 'arn:aws:s3:::dig-bio-index/*'
+                  - 'arn:aws:s3:::*'
+                  - 'arn:aws:s3:::*/*'
         - PolicyName: 'ECSTaskExecution'
           PolicyDocument:
               Version: '2012-10-17'