Add *ObjectTagging perms

Sage-Bionetworks · Sep 3, 2024 · b2f7c83 · b2f7c83
1 parent 80afbae
commit b2f7c83
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/templates/S3/synapse-external-bucket.j2 b/templates/S3/synapse-external-bucket.j2
@@ -137,6 +137,7 @@ Resources:
               AWS: !Ref GrantAccess
             Action:
               - "s3:GetObject"
+              - "s3:GetObjectTagging"
               - "s3:GetObjectAcl"
               - "s3:ListMultipartUploadParts"
               - "s3:GetObjectAttributes"
@@ -150,6 +151,7 @@ Resources:
                 AWS: !Ref GrantAccess
               Action:
                 - "s3:PutObject"
+                - "s3:PutObjectTagging"
                 - "s3:PutObjectAcl"
                 - "s3:DeleteObject*"
                 - "s3:*MultipartUpload*"