Merge pull request #86 from jaywang144/patch-1

Add s3:GetObject permission to EC2 instance role
aws-samples · Jan 31, 2020 · f7283d7 · f7283d7
2 parents 379f626 + a4f41e5
commit f7283d7
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/templates/cromwell/cromwell-server.template.yaml b/src/templates/cromwell/cromwell-server.template.yaml
@@ -142,7 +142,7 @@ Resources:
                 Action:
                   - "s3:ListBucket"
                   - "s3:ListAllMyBuckets"
-
+                  - "s3:GetObject"
 
         - PolicyName: !Sub CromwellServer-CloudWatch-Access-${AWS::Region}
           PolicyDocument: