From 19e63a95fe20401ab04a768b3b512c216a0452e8 Mon Sep 17 00:00:00 2001 From: Khalim Conn-Kowlessar Date: Tue, 5 Sep 2023 11:28:52 +0100 Subject: [PATCH] testing fully permissive permissions --- sapmodel.serverless.yml | 11 ++++++----- 1 file changed, 6 insertions(+), 5 deletions(-) diff --git a/sapmodel.serverless.yml b/sapmodel.serverless.yml index 2522a849..77d9fc1f 100644 --- a/sapmodel.serverless.yml +++ b/sapmodel.serverless.yml @@ -19,13 +19,14 @@ provider: # Allow reading from MODEL_DIRECTORY_BUCKET and DATA_BUCKET - Effect: Allow Action: - - s3:GetObject - - s3:ListBucket + - s3:* + # - s3:GetObject + # - s3:ListBucket Resource: - arn:aws:s3:::${env:MODEL_DIRECTORY_BUCKET} - - arn:aws:s3:::${env:MODEL_DIRECTORY_BUCKET}/* - - arn:aws:s3:::${env:DATA_BUCKET} - - arn:aws:s3:::${env:DATA_BUCKET}/* + - arn:aws:s3:::${env:MODEL_DIRECTORY_BUCKET}/* + - arn:aws:s3:::${env:DATA_BUCKET} + - arn:aws:s3:::${env:DATA_BUCKET}/* # Allow reading and writing to PREDICTIONS_BUCKET - Effect: Allow Action: