You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@grails.apache.org by ja...@apache.org on 2026/08/29 00:41:29 UTC
(grails-core) branch fix/forge-aws-eb-s3-acl created (now 4bfe59dad2)
This is an automated email from the ASF dual-hosted git repository.
jamesfredley pushed a change to branch fix/forge-aws-eb-s3-acl
in repository https://gitbox.apache.org/repos/asf/grails-core.git
at 4bfe59dad2 Allow Forge AWS deploys S3 ACL and delete on the EB bucket
This branch includes the following new commits:
new 4bfe59dad2 Allow Forge AWS deploys S3 ACL and delete on the EB bucket
The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
(grails-core) 01/01: Allow Forge AWS deploys S3 ACL and delete on the EB bucket
Posted by ja...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
jamesfredley pushed a commit to branch fix/forge-aws-eb-s3-acl
in repository https://gitbox.apache.org/repos/asf/grails-core.git
commit 4bfe59dad2c086903fe19374f027bc09614157cd
Author: James Fredley <ja...@users.noreply.github.com>
AuthorDate: Fri Aug 28 20:41:18 2026 -0400
Allow Forge AWS deploys S3 ACL and delete on the EB bucket
GitHub Actions UpdateEnvironment failed with s3:PutObjectAcl and
s3:DeleteObject on elasticbeanstalk-<region>-<account>. Grant those
on the artifact bucket and the Elastic Beanstalk storage bucket.
---
grails-forge/infrastructure/shared.yaml | 5 ++++-
1 file changed, 4 insertions(+), 1 deletion(-)
diff --git a/grails-forge/infrastructure/shared.yaml b/grails-forge/infrastructure/shared.yaml
index 410de77e31..ef12cb5e2d 100644
--- a/grails-forge/infrastructure/shared.yaml
+++ b/grails-forge/infrastructure/shared.yaml
@@ -248,6 +248,8 @@ Resources:
- s3:GetObjectVersion
- s3:GetObjectAcl
- s3:PutObject
+ - s3:PutObjectAcl
+ - s3:DeleteObject
Effect: Allow
Resource:
- Fn::Sub: ${ArtifactBucket.Arn}/*
@@ -257,7 +259,8 @@ Resources:
- s3:GetBucketLocation
Effect: Allow
Resource:
- Fn::Sub: arn:${AWS::Partition}:s3:::elasticbeanstalk-${AWS::Region}-${AWS::AccountId}
+ - Fn::Sub: ${ArtifactBucket.Arn}
+ - Fn::Sub: arn:${AWS::Partition}:s3:::elasticbeanstalk-${AWS::Region}-${AWS::AccountId}
- Action: elasticbeanstalk:CreateStorageLocation
Effect: Allow
Resource: '*'