data_archive TF: Added steps-s3-copy role get attributes and tagging

umccr · Jan 3, 2025 · 50a3463 · 50a3463
1 parent 3c9293d
commit 50a3463
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 0 deletions.
diff --git a/terraform/stacks/unimelb/data_archive/analysis_archive.tf b/terraform/stacks/unimelb/data_archive/analysis_archive.tf
@@ -149,6 +149,10 @@ data "aws_iam_policy_document" "analysis_archive" {
       "s3:RestoreObject",
       "s3:GetObject",
       "s3:GetObjectVersion",
+      "s3:GetObjectAttributes",
+      "s3:GetObjectVersionAttributes",
+      "s3:GetObjectTagging",
+      "s3:GetObjectVersionTagging",
     ])
     resources = sort([
       aws_s3_bucket.analysis_archive.arn,

diff --git a/terraform/stacks/unimelb/data_archive/fastq_archive.tf b/terraform/stacks/unimelb/data_archive/fastq_archive.tf
@@ -155,6 +155,10 @@ data "aws_iam_policy_document" "fastq_archive" {
       "s3:RestoreObject",
       "s3:GetObject",
       "s3:GetObjectVersion",
+      "s3:GetObjectAttributes",
+      "s3:GetObjectVersionAttributes",
+      "s3:GetObjectTagging",
+      "s3:GetObjectVersionTagging",
     ])
     resources = sort([
       aws_s3_bucket.fastq_archive.arn,