Skip to content

Commit 8dc1c18

Browse files
authored
revert: "fix(s3): grantRead does not allow s3:HeadObject (#27416)" (#27556)
This reverts commit beac675. Comments on #27416 demonstrate that the PR was created due to misunderstanding of an error message. ---- *By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*
1 parent 1b54353 commit 8dc1c18

124 files changed

Lines changed: 14 additions & 299 deletions

File tree

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

packages/@aws-cdk-testing/framework-integ/test/aws-codebuild/test/integ.asset-build-spec.js.snapshot/CodeBuildAssetBuildSpecStack.template.json

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -26,7 +26,6 @@
2626
"Action": [
2727
"s3:GetBucket*",
2828
"s3:GetObject*",
29-
"s3:HeadObject",
3029
"s3:List*"
3130
],
3231
"Effect": "Allow",

packages/@aws-cdk-testing/framework-integ/test/aws-codebuild/test/integ.caching.js.snapshot/aws-cdk-codebuild.template.json

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -33,7 +33,6 @@
3333
"s3:DeleteObject*",
3434
"s3:GetBucket*",
3535
"s3:GetObject*",
36-
"s3:HeadObject",
3736
"s3:List*",
3837
"s3:PutObject",
3938
"s3:PutObjectLegalHold",

packages/@aws-cdk-testing/framework-integ/test/aws-codebuild/test/integ.project-bucket.js.snapshot/aws-cdk-codebuild.template.json

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -31,7 +31,6 @@
3131
"Action": [
3232
"s3:GetBucket*",
3333
"s3:GetObject*",
34-
"s3:HeadObject",
3534
"s3:List*"
3635
],
3736
"Effect": "Allow",

packages/@aws-cdk-testing/framework-integ/test/aws-codebuild/test/integ.project-buildspec-artifacts.js.snapshot/aws-cdk-codebuild-buildspec-artifact-name.template.json

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -33,7 +33,6 @@
3333
"s3:DeleteObject*",
3434
"s3:GetBucket*",
3535
"s3:GetObject*",
36-
"s3:HeadObject",
3736
"s3:List*",
3837
"s3:PutObject",
3938
"s3:PutObjectLegalHold",

packages/@aws-cdk-testing/framework-integ/test/aws-codebuild/test/integ.project-secondary-sources-artifacts.js.snapshot/aws-cdk-codebuild-secondary-sources-artifacts.template.json

Lines changed: 0 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -31,7 +31,6 @@
3131
"Action": [
3232
"s3:GetBucket*",
3333
"s3:GetObject*",
34-
"s3:HeadObject",
3534
"s3:List*"
3635
],
3736
"Effect": "Allow",
@@ -64,7 +63,6 @@
6463
"s3:DeleteObject*",
6564
"s3:GetBucket*",
6665
"s3:GetObject*",
67-
"s3:HeadObject",
6866
"s3:List*",
6967
"s3:PutObject",
7068
"s3:PutObjectLegalHold",

packages/@aws-cdk-testing/framework-integ/test/aws-codedeploy/test/server/integ.deployment-group.js.snapshot/aws-cdk-codedeploy-server-dg.template.json

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -445,7 +445,6 @@
445445
"Action": [
446446
"s3:GetBucket*",
447447
"s3:GetObject*",
448-
"s3:HeadObject",
449448
"s3:List*"
450449
],
451450
"Effect": "Allow",

packages/@aws-cdk-testing/framework-integ/test/aws-codepipeline-actions/test/cloudformation/integ.stacksets.js.snapshot/StackSetPipelineStack.template.json

Lines changed: 0 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -170,7 +170,6 @@
170170
"s3:DeleteObject*",
171171
"s3:GetBucket*",
172172
"s3:GetObject*",
173-
"s3:HeadObject",
174173
"s3:List*",
175174
"s3:PutObject",
176175
"s3:PutObjectLegalHold",
@@ -393,7 +392,6 @@
393392
"Action": [
394393
"s3:GetBucket*",
395394
"s3:GetObject*",
396-
"s3:HeadObject",
397395
"s3:List*"
398396
],
399397
"Effect": "Allow",
@@ -558,7 +556,6 @@
558556
"Action": [
559557
"s3:GetBucket*",
560558
"s3:GetObject*",
561-
"s3:HeadObject",
562559
"s3:List*"
563560
],
564561
"Effect": "Allow",

packages/@aws-cdk-testing/framework-integ/test/aws-codepipeline-actions/test/integ.cfn-template-from-repo.lit.js.snapshot/aws-cdk-codepipeline-cloudformation.template.json

Lines changed: 0 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -158,7 +158,6 @@
158158
"s3:DeleteObject*",
159159
"s3:GetBucket*",
160160
"s3:GetObject*",
161-
"s3:HeadObject",
162161
"s3:List*",
163162
"s3:PutObject",
164163
"s3:PutObjectLegalHold",
@@ -434,7 +433,6 @@
434433
"s3:DeleteObject*",
435434
"s3:GetBucket*",
436435
"s3:GetObject*",
437-
"s3:HeadObject",
438436
"s3:List*",
439437
"s3:PutObject",
440438
"s3:PutObjectLegalHold",
@@ -560,7 +558,6 @@
560558
"Action": [
561559
"s3:GetBucket*",
562560
"s3:GetObject*",
563-
"s3:HeadObject",
564561
"s3:List*"
565562
],
566563
"Effect": "Allow",
@@ -671,7 +668,6 @@
671668
"Action": [
672669
"s3:GetBucket*",
673670
"s3:GetObject*",
674-
"s3:HeadObject",
675671
"s3:List*"
676672
],
677673
"Effect": "Allow",

packages/@aws-cdk-testing/framework-integ/test/aws-codepipeline-actions/test/integ.lambda-deployed-through-codepipeline.lit.js.snapshot/PipelineStack.template.json

Lines changed: 0 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -152,7 +152,6 @@
152152
"s3:DeleteObject*",
153153
"s3:GetBucket*",
154154
"s3:GetObject*",
155-
"s3:HeadObject",
156155
"s3:List*",
157156
"s3:PutObject",
158157
"s3:PutObjectLegalHold",
@@ -498,7 +497,6 @@
498497
"s3:DeleteObject*",
499498
"s3:GetBucket*",
500499
"s3:GetObject*",
501-
"s3:HeadObject",
502500
"s3:List*",
503501
"s3:PutObject",
504502
"s3:PutObjectLegalHold",
@@ -616,7 +614,6 @@
616614
"s3:DeleteObject*",
617615
"s3:GetBucket*",
618616
"s3:GetObject*",
619-
"s3:HeadObject",
620617
"s3:List*",
621618
"s3:PutObject",
622619
"s3:PutObjectLegalHold",
@@ -926,7 +923,6 @@
926923
"Action": [
927924
"s3:GetBucket*",
928925
"s3:GetObject*",
929-
"s3:HeadObject",
930926
"s3:List*"
931927
],
932928
"Effect": "Allow",
@@ -1035,7 +1031,6 @@
10351031
"Action": [
10361032
"s3:GetBucket*",
10371033
"s3:GetObject*",
1038-
"s3:HeadObject",
10391034
"s3:List*"
10401035
],
10411036
"Effect": "Allow",
@@ -1352,7 +1347,6 @@
13521347
"s3:DeleteObject*",
13531348
"s3:GetBucket*",
13541349
"s3:GetObject*",
1355-
"s3:HeadObject",
13561350
"s3:List*",
13571351
"s3:PutObject",
13581352
"s3:PutObjectLegalHold",
@@ -1564,7 +1558,6 @@
15641558
"s3:DeleteObject*",
15651559
"s3:GetBucket*",
15661560
"s3:GetObject*",
1567-
"s3:HeadObject",
15681561
"s3:List*",
15691562
"s3:PutObject",
15701563
"s3:PutObjectLegalHold",

packages/@aws-cdk-testing/framework-integ/test/aws-codepipeline-actions/test/integ.lambda-pipeline.js.snapshot/aws-cdk-codepipeline-lambda.template.json

Lines changed: 0 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -152,7 +152,6 @@
152152
"s3:DeleteObject*",
153153
"s3:GetBucket*",
154154
"s3:GetObject*",
155-
"s3:HeadObject",
156155
"s3:List*",
157156
"s3:PutObject",
158157
"s3:PutObjectLegalHold",
@@ -361,7 +360,6 @@
361360
"Action": [
362361
"s3:GetBucket*",
363362
"s3:GetObject*",
364-
"s3:HeadObject",
365363
"s3:List*"
366364
],
367365
"Effect": "Allow",

0 commit comments

Comments
 (0)