From 3713bcdee224a2a77bcb8cfc2d5cc9fb93ee501e Mon Sep 17 00:00:00 2001 From: vickytechkey Date: Sun, 16 Aug 2026 19:02:37 +0530 Subject: [PATCH] feat: grant S3 bucket access to EC2 instance role for document storage management --- aws_cdk/lib/aws_cdk-stack.ts | 15 +++++++++++++++ 1 file changed, 15 insertions(+) diff --git a/aws_cdk/lib/aws_cdk-stack.ts b/aws_cdk/lib/aws_cdk-stack.ts index 6502bcc..2e7fe0b 100644 --- a/aws_cdk/lib/aws_cdk-stack.ts +++ b/aws_cdk/lib/aws_cdk-stack.ts @@ -113,6 +113,21 @@ export class AwsCdkStack extends cdk.Stack { ], })); + // S3 access for Betasupplierdocument storage + role.addToPolicy(new iam.PolicyStatement({ + actions: [ + 's3:ListBucket', + 's3:GetBucketLocation', + 's3:GetObject', + 's3:PutObject', + 's3:DeleteObject', + ], + resources: [ + 'arn:aws:s3:::betasupplierdocument-764709663363-ap-south-2-an', + 'arn:aws:s3:::betasupplierdocument-764709663363-ap-south-2-an/*', + ], + })); + // 3. Define the EC2 Instance (t4g.medium) const instance = new ec2.Instance(this, 'internalsInstance', { vpc,