Merge pull request #1027 from marcomarasca/revert-1026-PLFM-8005

Revert "PLFM-8005: Allows snowflake to access synapse bucket inventory"
Sage-Bionetworks-IT · Nov 16, 2023 · 7093f90 · 7093f90
2 parents 868dd2e + b00b725
commit 7093f90
Showing 1 changed file with 1 addition and 17 deletions.
diff --git a/sceptre/synapseprod/templates/snowflake-access.yaml b/sceptre/synapseprod/templates/snowflake-access.yaml
@@ -21,10 +21,7 @@ Resources:
                       "s3:GetObject",
                       "s3:GetObjectVersion"
                   ],
-                  "Resource": [
-                    "arn:aws:s3:::prod.datawarehouse.sagebase.org/warehouse/*",
-                    "arn:aws:s3:::prod.inventory.sagebase.org/inventory/proddata.sagebase.org/defaultInventory/*"
-                  ]
+                  "Resource": "arn:aws:s3:::prod.datawarehouse.sagebase.org/warehouse/*"
               },
               {
                   "Effect": "Allow",
@@ -38,19 +35,6 @@ Resources:
                         "s3:prefix": [ "warehouse/*" ]
                       }
                   }
-              },
-              {
-                  "Effect": "Allow",
-                  "Action": [
-                      "s3:ListBucket",
-                      "s3:GetBucketLocation"
-                  ],
-                  "Resource": "arn:aws:s3:::prod.inventory.sagebase.org",
-                  "Condition": {
-                      "StringLike": {
-                        "s3:prefix": [ "inventory/proddata.sagebase.org/defaultInventory/*" ]
-                      }
-                  }
               }
           ]
         }