Merge pull request #1026 from marcomarasca/PLFM-8005

PLFM-8005: Allows snowflake to access synapse bucket inventory
Sage-Bionetworks-IT · Nov 15, 2023 · 868dd2e · 868dd2e
2 parents 864b04b + 885f023
commit 868dd2e
Showing 1 changed file with 17 additions and 1 deletion.
diff --git a/sceptre/synapseprod/templates/snowflake-access.yaml b/sceptre/synapseprod/templates/snowflake-access.yaml
@@ -21,7 +21,10 @@ Resources:
                       "s3:GetObject",
                       "s3:GetObjectVersion"
                   ],
-                  "Resource": "arn:aws:s3:::prod.datawarehouse.sagebase.org/warehouse/*"
+                  "Resource": [
+                    "arn:aws:s3:::prod.datawarehouse.sagebase.org/warehouse/*",
+                    "arn:aws:s3:::prod.inventory.sagebase.org/inventory/proddata.sagebase.org/defaultInventory/*"
+                  ]
               },
               {
                   "Effect": "Allow",
@@ -35,6 +38,19 @@ Resources:
                         "s3:prefix": [ "warehouse/*" ]
                       }
                   }
+              },
+              {
+                  "Effect": "Allow",
+                  "Action": [
+                      "s3:ListBucket",
+                      "s3:GetBucketLocation"
+                  ],
+                  "Resource": "arn:aws:s3:::prod.inventory.sagebase.org",
+                  "Condition": {
+                      "StringLike": {
+                        "s3:prefix": [ "inventory/proddata.sagebase.org/defaultInventory/*" ]
+                      }
+                  }
               }
           ]
         }