put permission for get object version

ecmwf-projects · Mar 31, 2023 · bafff4d · bafff4d
1 parent e57075d
commit bafff4d
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/cads_catalogue/object_storage.py b/cads_catalogue/object_storage.py
@@ -37,7 +37,7 @@
             "Resource": ["arn:aws:s3:::%(bucket_name)s"],
         },
         {
-            "Action": ["s3:GetObject"],
+            "Action": ["s3:GetObject", "s3:GetObjectVersion"],
             "Effect": "Allow",
             "Principal": {"AWS": ["*"]},
             "Resource": ["arn:aws:s3:::%(bucket_name)s/*"],
@@ -64,6 +64,7 @@
                 "s3:AbortMultipartUpload",
                 "s3:DeleteObject",
                 "s3:GetObject",
+                "s3:GetObjectVersion",
                 "s3:ListMultipartUploadParts",
             ],
             "Effect": "Allow",