Grant Phil, Rixing identity-central accounts access to S3

Sage-Bionetworks · Aug 30, 2023 · f72916d · f72916d
1 parent fdf30bd
commit f72916d
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/templates/s3-bucket.yaml b/templates/s3-bucket.yaml
@@ -54,7 +54,10 @@ Resources:
           - Sid: AccountRead
             Effect: Allow
             Principal:
-              AWS: !Sub '${AWS::AccountId}'
+              AWS:
+                - !Sub '${AWS::AccountId}'
+                - 'arn:aws:sts::526515999252:assumed-role/AWSReservedSSO_S3ExternalCollab_40c062f682e7f3f5/[email protected]'
+                - 'arn:aws:sts::526515999252:assumed-role/AWSReservedSSO_S3ExternalCollab_40c062f682e7f3f5/[email protected]'
             Action:
               - 's3:Get*'
               - 's3:List*'