Drop the client-side public-read ACL and inherit from the bucket

Signed-off-by: Kyle Harding <[email protected]>
balena-os · Dec 17, 2024 · d59c88f · d59c88f
1 parent 9128d7e
commit d59c88f
Showing 1 changed file with 1 addition and 2 deletions.
diff --git a/.github/workflows/yocto-build-deploy.yml b/.github/workflows/yocto-build-deploy.yml
@@ -649,7 +649,6 @@ jobs:
         continue-on-error: true
         env:
           SHARED_DOWNLOADS_DIR: ${{ github.workspace }}/shared/shared-downloads
-          S3_ACL: public-read
           S3_SSE: AES256
           S3_URL: "s3://${{ env.DOWNLOADS_MIRROR_BUCKET }}/shared-downloads"
           S3_REGION: ${{ env.DOWNLOADS_MIRROR_REGION }}
@@ -658,7 +657,7 @@ jobs:
         run: |
           sudo ln -sf "${{ github.workspace }}" /work
           ls -al "${SHARED_DOWNLOADS_DIR}/"
-          aws s3 sync --sse="${S3_SSE}" --acl="${S3_ACL}" "${SHARED_DOWNLOADS_DIR}/" "${S3_URL}/" \
+          aws s3 sync --sse="${S3_SSE}" "${SHARED_DOWNLOADS_DIR}/" "${S3_URL}/" \
             --exclude "*/*" --exclude "*.tmp" --size-only --follow-symlinks --no-progress
 
       # TODO: pre-install on self-hosted-runners