ca7c46b775
Adds the one-session Scaleway IAM grant script, merges the publisher bucket probes into one statement to fit the 10-statement limit, keeps the Playwright cache under the account home during attended login, and records the publisher-gate runs through the num_uses rejection. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 49552@bnt-lap001 Assistant-Session: 575802ee-c0c0-42a9-b2a1-9204c9f5b3f4
88 lines
4.2 KiB
JSON
88 lines
4.2 KiB
JSON
{
|
|
"Version": "2023-04-17",
|
|
"Id": "resource-control-scoped-backup",
|
|
"Statement": [
|
|
{
|
|
"Sid": "BackupBucketProbe",
|
|
"Effect": "Allow",
|
|
"Principal": {"SCW": "application_id:ee80333e-5bab-4a04-85a9-5bdb46b7b3c1"},
|
|
"Action": ["s3:GetBucketLocation", "s3:GetBucketVersioning", "s3:GetLifecycleConfiguration", "s3:ListBucket"],
|
|
"Resource": "railiance-platform-pg-backup",
|
|
"Condition": {"Bool": {"aws:SecureTransport": "true"}}
|
|
},
|
|
{
|
|
"Sid": "BackupListPrefix",
|
|
"Effect": "Allow",
|
|
"Principal": {"SCW": "application_id:ee80333e-5bab-4a04-85a9-5bdb46b7b3c1"},
|
|
"Action": ["s3:ListBucketMultipartUploads", "s3:ListBucketVersions"],
|
|
"Resource": "railiance-platform-pg-backup",
|
|
"Condition": {"StringLike": {"s3:prefix": ["platform-pg/", "platform-pg/*"]}}
|
|
},
|
|
{
|
|
"Sid": "BackupObjectsUnderPrefix",
|
|
"Effect": "Allow",
|
|
"Principal": {"SCW": "application_id:ee80333e-5bab-4a04-85a9-5bdb46b7b3c1"},
|
|
"Action": ["s3:AbortMultipartUpload", "s3:DeleteObject", "s3:DeleteObjectVersion", "s3:GetObject", "s3:GetObjectVersion", "s3:ListMultipartUploadParts", "s3:PutObject"],
|
|
"Resource": "railiance-platform-pg-backup/platform-pg/*"
|
|
},
|
|
{
|
|
"Sid": "PublisherBucketProbe",
|
|
"Effect": "Allow",
|
|
"Principal": {
|
|
"SCW": [
|
|
"application_id:681d00bf-b965-4323-b657-97bfde423511",
|
|
"application_id:0eb0f958-77a4-4c70-9aa7-14ba46411415",
|
|
"application_id:25a4cbca-220e-40c0-9af5-6c7713000174"
|
|
]
|
|
},
|
|
"Action": ["s3:GetBucketLocation", "s3:GetBucketVersioning", "s3:GetLifecycleConfiguration"],
|
|
"Resource": "railiance-platform-pg-backup",
|
|
"Condition": {"Bool": {"aws:SecureTransport": "true"}}
|
|
},
|
|
{
|
|
"Sid": "CoulombSocialBackupList",
|
|
"Effect": "Allow",
|
|
"Principal": {"SCW": "application_id:681d00bf-b965-4323-b657-97bfde423511"},
|
|
"Action": ["s3:ListBucket", "s3:ListBucketMultipartUploads", "s3:ListBucketVersions"],
|
|
"Resource": "railiance-platform-pg-backup",
|
|
"Condition": {"StringLike": {"s3:prefix": ["platform-pg/application-archives/coulomb-social/", "platform-pg/application-archives/coulomb-social/*"]}}
|
|
},
|
|
{
|
|
"Sid": "CoulombSocialBackupObjects",
|
|
"Effect": "Allow",
|
|
"Principal": {"SCW": "application_id:681d00bf-b965-4323-b657-97bfde423511"},
|
|
"Action": ["s3:AbortMultipartUpload", "s3:GetObject", "s3:GetObjectVersion", "s3:ListMultipartUploadParts", "s3:PutObject"],
|
|
"Resource": "railiance-platform-pg-backup/platform-pg/application-archives/coulomb-social/*"
|
|
},
|
|
{
|
|
"Sid": "EmailConnectBackupList",
|
|
"Effect": "Allow",
|
|
"Principal": {"SCW": "application_id:0eb0f958-77a4-4c70-9aa7-14ba46411415"},
|
|
"Action": ["s3:ListBucket", "s3:ListBucketMultipartUploads", "s3:ListBucketVersions"],
|
|
"Resource": "railiance-platform-pg-backup",
|
|
"Condition": {"StringLike": {"s3:prefix": ["platform-pg/application-archives/email-connect/", "platform-pg/application-archives/email-connect/*"]}}
|
|
},
|
|
{
|
|
"Sid": "EmailConnectBackupObjects",
|
|
"Effect": "Allow",
|
|
"Principal": {"SCW": "application_id:0eb0f958-77a4-4c70-9aa7-14ba46411415"},
|
|
"Action": ["s3:AbortMultipartUpload", "s3:GetObject", "s3:GetObjectVersion", "s3:ListMultipartUploadParts", "s3:PutObject"],
|
|
"Resource": "railiance-platform-pg-backup/platform-pg/application-archives/email-connect/*"
|
|
},
|
|
{
|
|
"Sid": "MasEvidenceBackupList",
|
|
"Effect": "Allow",
|
|
"Principal": {"SCW": "application_id:25a4cbca-220e-40c0-9af5-6c7713000174"},
|
|
"Action": ["s3:ListBucket", "s3:ListBucketMultipartUploads", "s3:ListBucketVersions"],
|
|
"Resource": "railiance-platform-pg-backup",
|
|
"Condition": {"StringLike": {"s3:prefix": ["platform-pg/application-archives/mas/", "platform-pg/application-archives/mas/*"]}}
|
|
},
|
|
{
|
|
"Sid": "MasEvidenceBackupObjects",
|
|
"Effect": "Allow",
|
|
"Principal": {"SCW": "application_id:25a4cbca-220e-40c0-9af5-6c7713000174"},
|
|
"Action": ["s3:AbortMultipartUpload", "s3:GetObject", "s3:GetObjectVersion", "s3:ListMultipartUploadParts", "s3:PutObject"],
|
|
"Resource": "railiance-platform-pg-backup/platform-pg/application-archives/mas/*"
|
|
}
|
|
]
|
|
}
|