Skip to content
This repository was archived by the owner on May 5, 2025. It is now read-only.

Commit 1332556

Browse files
authored
Update awscredentials.md (#398)
1 parent 8f06a4b commit 1332556

File tree

1 file changed

+4
-11
lines changed

1 file changed

+4
-11
lines changed

docs/guides/credentials/awscredentials.md

Lines changed: 4 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -24,15 +24,6 @@ As an example, the following IAM policy contains only the permissions required b
2424
{
2525
"Version": "2012-10-17",
2626
"Statement": [
27-
{
28-
"Sid": "S3SourceSetBucketConfig",
29-
"Effect": "Allow",
30-
"Action": [
31-
"s3:GetBucketNotification",
32-
"s3:PutBucketNotification"
33-
],
34-
"Resource": "arn:aws:s3:::*"
35-
},
3627
{
3728
"Sid": "S3SourceConsumeMessages",
3829
"Effect": "Allow",
@@ -47,7 +38,7 @@ As an example, the following IAM policy contains only the permissions required b
4738
}
4839
```
4940

50-
There are cases in which additional permissions are required, such as when the TriggerMesh component manages other AWS resources on your behalf. For example, the S3 source uses an SQS queue under the hood to gather and consume S3 bucket notifications. You can either provide a reference to an existing queue that you created beforehand, or you can let TriggerMesh create it on your behalf by providing the following permissions:
41+
There are cases in which additional permissions are required, such as when the TriggerMesh component manages other AWS resources on your behalf. For example, the S3 source uses an SQS queue under the hood to gather and consume S3 bucket notifications. You can either provide a reference to an existing queue that you created beforehand, or you can let TriggerMesh create it on your behalf by providing the following permissions to the TriggerMesh controller:
5142

5243
```json
5344
{
@@ -57,7 +48,9 @@ There are cases in which additional permissions are required, such as when the T
5748
"Sid": "S3SourceGetBucketLocation",
5849
"Effect": "Allow",
5950
"Action": [
60-
"s3:GetBucketLocation"
51+
"s3:GetBucketLocation",
52+
"s3:GetBucketNotification",
53+
"s3:PutBucketNotification"
6154
],
6255
"Resource": "arn:aws:s3:::*"
6356
},

0 commit comments

Comments
 (0)