avoid hack

2026-08-20 06:07:05 +00:00 · 2025-08-25 20:27:11 -07:00
parent ca3c5eadb2
commit b8d3d8d9fc
3 changed files with 11 additions and 11 deletions
@@ -234,6 +234,17 @@
              "arn:seaweed:s3:::*/*"
            ]
          },
+          {
+            "Effect": "Deny",
+            "Action": [
+              "s3:GetObject",
+              "s3:ListBucket"
+            ],
+            "Resource": [
+              "arn:seaweed:s3:::*",
+              "arn:seaweed:s3:::*/*"
+            ]
+          },
          {
            "Effect": "Allow",
            "Action": ["sts:ValidateSession"],