From 2df92b9a7a4ebbf5aa12489a840fc7d91405e59e Mon Sep 17 00:00:00 2001 From: sharkinsspatial Date: Thu, 8 Jul 2021 11:10:54 -0400 Subject: [PATCH] Modify bucket policy to include abort. --- stack/stack.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/stack/stack.py b/stack/stack.py index 2f0a7b0..879047a 100644 --- a/stack/stack.py +++ b/stack/stack.py @@ -667,7 +667,7 @@ def __init__(self, scope: core.Construct, id: str, **kwargs) -> None: self.sentinel_input_bucket.bucket_arn, f"{self.sentinel_input_bucket.bucket_arn}/*", ], - actions=["s3:PutObject", "s3:PutObjectAcl"], + actions=["s3:PutObject", "s3:Abort"], principals=[aws_iam.ArnPrincipal(DOWNLOADER_FUNCTION_ARN)] ) )