dandi / dandi-infrastructure

A repository to collect docs/issues on DANDI project infrastructure
Apache License 2.0
0 stars 6 forks source link

Add `s3:PutObjectTagging` permission to sponsored bucket #183

Closed jjnesbitt closed 6 months ago

jjnesbitt commented 6 months ago

This gives the production heroku user permission for the PutObjectTagging action, from the bucket policy itself. This actually solves the issue that #182 was attempting to solve. That change didn't work because permissions to the production bucket must be added on the bucket policy itself (because the bucket and user reside in two different accounts), and we were only adding that permission to the user itself, not the bucket.