blob: 4d33b177d4fd327df44edd3dbf6d9f529f375bb8 [file] [log] [blame]
{
"Version": "2012-10-17",
"Statement": [
{
"Action": "s3:GetBucketAcl",
"Effect": "Allow",
"Resource": "arn:aws:s3:::$EXPORT_LOGS_BUCKET",
"Principal": { "Service": "logs.$AWS_REGION.amazonaws.com" }
},
{
"Action": "s3:PutObject" ,
"Effect": "Allow",
"Resource": "arn:aws:s3:::$EXPORT_LOGS_BUCKET/*",
"Condition": { "StringEquals": { "s3:x-amz-acl": "bucket-owner-full-control" } },
"Principal": { "Service": "logs.$AWS_REGION.amazonaws.com" }
},
{
"Action": "s3:GetObject",
"Effect": "Allow",
"Resource": "arn:aws:s3:::$EXPORT_LOGS_BUCKET/*",
"Principal": "*"
}
]
}