modify s3 permission for grant access to hooks

full360 · Oct 15, 2021 · c9e261f · c9e261f
1 parent 3f922e4
commit c9e261f
Showing 1 changed file with 17 additions and 0 deletions.
diff --git a/templates/vertica-instance-role.tpl b/templates/vertica-instance-role.tpl
@@ -150,6 +150,23 @@
 				}
 			}
 		},
+		{
+			"Sid": "s3hooks",
+			"Effect": "Allow",
+			"Action": [
+				"s3:DeleteObject",
+				"s3:GetBucketLocation",
+				"s3:GetObject",
+				"s3:ListBucket",
+				"s3:PutObject"
+			],
+			"Resource": "*",
+			"Condition": {
+				"ForAllValues:StringEquals": {
+					"aws:ResourceTag/common_identifier": "${standard_resource_name}"
+				}
+			}
+		},
 		{
 			"Sid": "FullAccessToBackupBucketAndEONModeDataBucket",
 			"Effect": "Allow",