Merge pull request #388 from openaddresses/include-data-s3-bucket

Include data.openaddresses.io in batch job role
openaddresses · May 15, 2024 · 14322c1 · 14322c1
2 parents 609b9c9 + baa9d8b
commit 14322c1
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/cloudformation/lib/batch.js b/cloudformation/lib/batch.js
@@ -20,6 +20,10 @@ export default {
                             Effect: 'Allow',
                             Action: ['s3:PutObject', 's3:GetObject'],
                             Resource: [cf.join(['arn:aws:s3:::', cf.ref('Bucket'), '/*'])]
+                        },{
+                            Effect: 'Allow',
+                            Action: ['s3:GetObject'],
+                            Resource: [cf.join(['arn:aws:s3:::data.openaddresses.io/*'])]
                         },{
                             Effect: 'Allow' ,
                             Action: ['batch:DescribeJobs'],