Merge pull request #211 from ASFHyP3/develop

RELEASE: fix get files IAM
ASFHyP3 · Aug 7, 2020 · 8234e64 · 8234e64
2 parents af1aff9 + 4684193
commit 8234e64
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 0 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -4,6 +4,9 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.3.6]
+### Fixed
+- `get-files` step functions AMI roles for tags
 
 ## [0.3.5]
 ### Added

diff --git a/step-function/get-files/cloudformation.yml b/step-function/get-files/cloudformation.yml
@@ -41,6 +41,9 @@ Resources:
               - Effect: Allow
                 Action: s3:ListBucket
                 Resource: !Sub "arn:aws:s3:::${Bucket}"
+              - Effect: Allow
+                Action: s3:GetObjectTagging
+                Resource: !Sub "arn:aws:s3:::${Bucket}/*"
 
   Lambda:
     Type: AWS::Lambda::Function