From 03234258e91baea7769bb24eb773fd63052d60b9 Mon Sep 17 00:00:00 2001 From: sambattalio Date: Tue, 6 Aug 2019 20:12:35 -0400 Subject: [PATCH] feat: Add tag related permissions to S3FullAccess Policy --- samtranslator/policy_templates_data/policy_templates.json | 8 +++++++- tests/translator/output/all_policy_templates.json | 8 +++++++- tests/translator/output/aws-cn/all_policy_templates.json | 8 +++++++- .../output/aws-us-gov/all_policy_templates.json | 8 +++++++- 4 files changed, 28 insertions(+), 4 deletions(-) diff --git a/samtranslator/policy_templates_data/policy_templates.json b/samtranslator/policy_templates_data/policy_templates.json index 4b3dc28e69..ed3023903f 100644 --- a/samtranslator/policy_templates_data/policy_templates.json +++ b/samtranslator/policy_templates_data/policy_templates.json @@ -859,7 +859,13 @@ "s3:GetObjectVersion", "s3:PutObject", "s3:PutObjectAcl", - "s3:DeleteObject" + "s3:DeleteObject", + "s3:DeleteObjectTagging", + "s3:DeleteObjectVersionTagging", + "s3:GetObjectTagging", + "s3:GetObjectVersionTagging", + "s3:PutObjectTagging", + "s3:PutObjectVersionTagging" ], "Resource": [ { diff --git a/tests/translator/output/all_policy_templates.json b/tests/translator/output/all_policy_templates.json index 9690d5bc6e..99733c7780 100644 --- a/tests/translator/output/all_policy_templates.json +++ b/tests/translator/output/all_policy_templates.json @@ -667,7 +667,13 @@ "s3:GetObjectVersion", "s3:PutObject", "s3:PutObjectAcl", - "s3:DeleteObject" + "s3:DeleteObject", + "s3:DeleteObjectTagging", + "s3:DeleteObjectVersionTagging", + "s3:GetObjectTagging", + "s3:GetObjectVersionTagging", + "s3:PutObjectTagging", + "s3:PutObjectVersionTagging" ], "Resource": [ { diff --git a/tests/translator/output/aws-cn/all_policy_templates.json b/tests/translator/output/aws-cn/all_policy_templates.json index 6b8be0e273..6df0352e0f 100644 --- a/tests/translator/output/aws-cn/all_policy_templates.json +++ b/tests/translator/output/aws-cn/all_policy_templates.json @@ -666,7 +666,13 @@ "s3:GetObjectVersion", "s3:PutObject", "s3:PutObjectAcl", - "s3:DeleteObject" + "s3:DeleteObject", + "s3:DeleteObjectTagging", + "s3:DeleteObjectVersionTagging", + "s3:GetObjectTagging", + "s3:GetObjectVersionTagging", + "s3:PutObjectTagging", + "s3:PutObjectVersionTagging" ], "Resource": [ { diff --git a/tests/translator/output/aws-us-gov/all_policy_templates.json b/tests/translator/output/aws-us-gov/all_policy_templates.json index 87621eb9dc..df9b0f8d1b 100644 --- a/tests/translator/output/aws-us-gov/all_policy_templates.json +++ b/tests/translator/output/aws-us-gov/all_policy_templates.json @@ -666,7 +666,13 @@ "s3:GetObjectVersion", "s3:PutObject", "s3:PutObjectAcl", - "s3:DeleteObject" + "s3:DeleteObject", + "s3:DeleteObjectTagging", + "s3:DeleteObjectVersionTagging", + "s3:GetObjectTagging", + "s3:GetObjectVersionTagging", + "s3:PutObjectTagging", + "s3:PutObjectVersionTagging" ], "Resource": [ {