Merge pull request #979 from spack/revert-977-main

Revert "Enable [email protected] to run `s3 sync` on a sub-bucket"
spack · Oct 22, 2024 · fcfc033 · fcfc033
2 parents e127594 + ba4ea06
commit fcfc033
Showing 1 changed file with 2 additions and 5 deletions.
diff --git a/terraform/modules/spack_aws_k8s/bootstrap_s3.tf b/terraform/modules/spack_aws_k8s/bootstrap_s3.tf
@@ -36,12 +36,9 @@ resource "aws_s3_bucket_policy" "bootstrap" {
           "AWS" : "arn:aws:iam::679174810898:root"
         },
         "Action" : [
-          "s3:CopyObject*",
-          "s3:DeleteObject*",
           "s3:GetObject*",
-          "s3:ListBucket*",
-          "s3:ListObjects*",
-          "s3:PutObject*"
+          "s3:PutObject*",
+          "s3:DeleteObject*"
         ],
         "Resource" : "arn:aws:s3:::${aws_s3_bucket.bootstrap.bucket}/pcluster/*"
       }