[PRMP-1604] Role action for getting object versions (#640)

lillie-dae · web-flow · commit 93e028d54e78 · 2026-03-23T09:22:39.000Z
diff --git a/infrastructure/iam.tf b/infrastructure/iam.tf
@@ -126,6 +126,7 @@ resource "aws_iam_policy" "s3_document_data_policy_for_get_doc_ref_lambda" {
         "Effect" : "Allow",
         "Action" : [
           "s3:GetObject",
+          "s3:GetObjectVersion",
         ],
         "Resource" : ["${module.ndr-lloyd-george-store.bucket_arn}/*"]
       }

Original file line number	Diff line number	Diff line change
`@@ -126,6 +126,7 @@ resource "aws_iam_policy" "s3_document_data_policy_for_get_doc_ref_lambda" {`
`126`	`126`	`"Effect" : "Allow",`
`127`	`127`	`"Action" : [`
`128`	`128`	`"s3:GetObject",`
	`129`	`+ "s3:GetObjectVersion",`
`129`	`130`	`],`
`130`	`131`	`"Resource" : ["${module.ndr-lloyd-george-store.bucket_arn}/*"]`
`131`	`132`	`}`