grand D&I the read permission

Tian-2017 · Tian-2017 · commit b4dd9b01caa4 · 2025-11-28T16:10:27.000Z
diff --git a/terraform/core/05-departments.tf b/terraform/core/05-departments.tf
@@ -165,6 +165,12 @@ module "department_data_and_insight" {
       paths       = []
       actions     = ["s3:Get*", "s3:List*", ]
     },
+    {
+      bucket_arn  = module.datahub_config.bucket_arn
+      kms_key_arn = module.datahub_config.kms_key_arn
+      paths       = []
+      actions     = ["s3:Get*", "s3:List*", ]
+    },
   ]
 }
 

Original file line number	Diff line number	Diff line change
`@@ -165,6 +165,12 @@ module "department_data_and_insight" {`
`165`	`165`	`paths = []`
`166`	`166`	`actions = ["s3:Get", "s3:List", ]`
`167`	`167`	`},`
	`168`	`+ {`
	`169`	`+ bucket_arn = module.datahub_config.bucket_arn`
	`170`	`+ kms_key_arn = module.datahub_config.kms_key_arn`
	`171`	`+ paths = []`
	`172`	`+ actions = ["s3:Get", "s3:List", ]`
	`173`	`+ },`
`168`	`174`	`]`
`169`	`175`	`}`
`170`	`176`