diff --git a/infrastructure/lambdas/pipeline-watchdog/iam-policy.json b/infrastructure/lambdas/pipeline-watchdog/iam-policy.json index f7840a4..bd3307c 100644 --- a/infrastructure/lambdas/pipeline-watchdog/iam-policy.json +++ b/infrastructure/lambdas/pipeline-watchdog/iam-policy.json @@ -41,6 +41,20 @@ "Effect": "Allow", "Action": ["s3:GetObject", "s3:PutObject"], "Resource": "arn:aws:s3:::alpha-engine-research/_alerts/_dedup/*" + }, + { + "Sid": "DedupMarkerListBucket", + "Effect": "Allow", + "Action": ["s3:ListBucket"], + "Resource": "arn:aws:s3:::alpha-engine-research", + "Condition": { + "StringLike": { + "s3:prefix": [ + "_alerts/_dedup", + "_alerts/_dedup/*" + ] + } + } } ] }