update s3 bucket permissions for oCIS 5

[wkloucek]

Description

update S3 permissions for oCIS 5

Related Issue

• Introduced by use tusd datastorages ocis#7499, use tusd datastorages cs3org/reva#4148

Motivation and Context

Compatibility

How Has This Been Tested?

• test deployment

Screenshots (if appropriate):

Types of changes

• Bug fix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds functionality)
• Breaking change (fix or feature that would cause existing functionality to change)
• Technical debt
• Tests only (no source changes)

Checklist:

• Code changes
• Unit tests added
• Acceptance tests added
• Documentation generated (make docs) and committed
• Documentation ticket raised:
• Documentation PR created:

[wkloucek]

@mmattel this should probably also hit the regular oCIS S3ng documentation.

[mmattel]

@mmattel this should probably also hit the regular oCIS S3ng documentation.

@wkloucek could you help and explain.

[wkloucek]

@mmattel this should probably also hit the regular oCIS S3ng documentation.

@wkloucek could you help and explain.

If you want to use the s3ng storage driver, you need a S3 bucket. In order to access the S3 bucket you need a service user / credentials. Linked to that service users you have a permission set. (compare eg. https://objectivefs.com/howto/how-to-restrict-s3-bucket-policy-to-only-one-aws-s3-bucket). This PR updates the minimum permission set that oCIS with s3ng driver needs for a S3 bucket