From fc4dca1d388fe379213a7c9d54dbc425dee28242 Mon Sep 17 00:00:00 2001
From: Sokratis Siozos-Drosos <ssd@monosolutions.com>
Date: Wed, 24 Apr 2019 18:10:29 +0200
Subject: [PATCH] (MODE-11365) increased s3 permissions.

---
 deployment/modules/tileserver/policies/policies.json | 8 +++-----
 1 file changed, 3 insertions(+), 5 deletions(-)

diff --git a/deployment/modules/tileserver/policies/policies.json b/deployment/modules/tileserver/policies/policies.json
index 4fadfaa..75eff03 100644
--- a/deployment/modules/tileserver/policies/policies.json
+++ b/deployment/modules/tileserver/policies/policies.json
@@ -45,13 +45,11 @@
             "Sid": "",
             "Effect": "Allow",
             "Action": [
-                "s3:GetObject",
-                "s3:ListBucket",
-                "s3:HeadObject"
+                "s3:*"
             ],
             "Resource": [
-                "arn:aws:s3:::mono-deployment-dev",
-                "arn:aws:s3:::mono-deployment-dev/tileserver-gl/*"
+                "arn:aws:s3:::mono-deployment-${environment}",
+                "arn:aws:s3:::mono-deployment-${environment}/*/*"
             ]
         }
     ]