Fix IAM permissions doc

quickwit-oss · May 20, 2024 · 8ee25c9 · rdettai · May 21, 2024 · 8ee25c9
1 parent e38bd6f
commit 8ee25c9
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 9 deletions.
diff --git a/distribution/ecs/quickwit/iam.tf b/distribution/ecs/quickwit/iam.tf
@@ -3,7 +3,6 @@ data "aws_iam_policy_document" "quickwit_task_permission" {
   statement {
     actions = [
       "s3:ListBucket",
-      "s3:ListObjects",
       "s3:GetObject",
       "s3:PutObject",
       "s3:DeleteObject"

diff --git a/docs/guides/aws-setup.md b/docs/guides/aws-setup.md
@@ -46,12 +46,11 @@ AWS credentials or region resolution may take a few seconds, especially if the A
 
 Required authorized actions:
 - `ListBucket` (on the bucket directly)
-- `AbortMultipartUpload`
-- `DeleteObject`
 - `GetObject`
-- `ListMultipartUploadParts`
-- `ListObjects`
 - `PutObject`
+- `DeleteObject`
+- `ListMultipartUploadParts`
+- `AbortMultipartUpload`
 
 Here is an example of a bucket policy:
 ```json
@@ -70,12 +69,11 @@ Here is an example of a bucket policy:
     {
       "Effect": "Allow",
       "Action": [
-        "s3:AbortMultipartUpload",
-        "s3:DeleteObject",
         "s3:GetObject",
+        "s3:PutObject",
+        "s3:DeleteObject",
         "s3:ListMultipartUploadParts",
-        "S3:ListObjects",
-        "s3:PutObject"
+        "s3:AbortMultipartUpload"
       ],
       "Resource": [
         "arn:aws:s3:::my-bucket/*"