Merge pull request #415 from xschildw/m-fix-synapse-bucket-policy

Add *ObjectTagging perms
Sage-Bionetworks · Sep 3, 2024 · 137375f · 137375f
2 parents 80afbae + b2f7c83
commit 137375f
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/templates/S3/synapse-external-bucket.j2 b/templates/S3/synapse-external-bucket.j2
@@ -137,6 +137,7 @@ Resources:
               AWS: !Ref GrantAccess
             Action:
               - "s3:GetObject"
+              - "s3:GetObjectTagging"
               - "s3:GetObjectAcl"
               - "s3:ListMultipartUploadParts"
               - "s3:GetObjectAttributes"
@@ -150,6 +151,7 @@ Resources:
                 AWS: !Ref GrantAccess
               Action:
                 - "s3:PutObject"
+                - "s3:PutObjectTagging"
                 - "s3:PutObjectAcl"
                 - "s3:DeleteObject*"
                 - "s3:*MultipartUpload*"