File tree 1 file changed +27
-0
lines changed
1 file changed +27
-0
lines changed Original file line number Diff line number Diff line change @@ -175,6 +175,7 @@ Resources:
175
175
- !Ref CodeBuildBasePolicy
176
176
- !Ref SecretsManagerPolicy
177
177
- !Ref CodeBuildCISTSAllow
178
+ - !Ref GeneratedVectorsArtifactsS3BucketPolicy
178
179
179
180
CodeBuildCIServiceRole :
180
181
Type : " AWS::IAM::Role"
@@ -189,6 +190,7 @@ Resources:
189
190
- !Ref CodeBuildBasePolicy
190
191
- !Ref SecretsManagerCIPolicy
191
192
- !Ref CodeBuildCISTSAllow
193
+ - !Ref GeneratedVectorsArtifactsS3BucketPolicy
192
194
193
195
CodeBuildBatchPolicy :
194
196
Type : " AWS::IAM::ManagedPolicy"
@@ -379,3 +381,28 @@ Resources:
379
381
}
380
382
]
381
383
}
384
+
385
+ GeneratedVectorsArtifactsS3Bucket :
386
+ Type : ' AWS::S3::Bucket'
387
+ Properties :
388
+ BucketName : generated-vectors-artifacts-bucket
389
+ LifecycleConfiguration :
390
+ Rules :
391
+ - Id : Expire artifacts in 14 days
392
+ Status : Enabled
393
+ ExpirationInDays : 14
394
+
395
+ GeneratedVectorsArtifactsS3BucketPolicy :
396
+ Type : ' AWS::IAM::ManagedPolicy'
397
+ Properties :
398
+ ManagedPolicyName : Generated-Vectors-Artifacts-S3-Bucket-Policy
399
+ PolicyDocument :
400
+ Version : 2012-10-17
401
+ Statement :
402
+ - Effect : Allow
403
+ Action :
404
+ - ' s3:PutObject'
405
+ - ' s3:GetObject'
406
+ - ' s3:DeleteObject'
407
+ Resource :
408
+ - !Join [ "", [ !GetAtt GeneratedVectorsArtifactsS3Bucket.Arn, '/*'] ]
You can’t perform that action at this time.
0 commit comments