cfn-templates/readmission-blog-cfn.yml [167:193]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
          PolicyDocument:
            Version: "2012-10-17"
            Statement:
              -
                Effect: "Allow"
                Action: 
                  - "s3:PutObject"
                  - "s3:GetObject"
                  - "s3:ListBucket"
                  - "s3:GetBucketAcl"
                  - "s3:DeleteObject"
                  - "s3:GetBucketLocation"
                Resource: !Sub ${MyBucket.Arn}/*
        -
          PolicyName: "kms-key-access"
          PolicyDocument:
            Version: "2012-10-17"
            Statement:
              -
                Effect: "Allow"
                Action: 
                  - "kms:Decrypt"
                  - "kms:Encrypt"
                  - "kms:GenerateDataKey"
                  - "kms:GenerateDataKeyWithoutPlaintext"
                  - "kms:DescribeKey"
                Resource: !Sub ${CMSymmetricKey.Arn}
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



cfn-templates/readmission-blog-cfn.yml [346:372]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
          PolicyDocument:
            Version: "2012-10-17"
            Statement:
              -
                Effect: "Allow"
                Action: 
                  - "s3:PutObject"
                  - "s3:GetObject"
                  - "s3:ListBucket"
                  - "s3:GetBucketAcl"
                  - "s3:DeleteObject"
                  - "s3:GetBucketLocation"
                Resource: !Sub ${MyBucket.Arn}/*
        -
          PolicyName: "kms-key-access"
          PolicyDocument:
            Version: "2012-10-17"
            Statement:
              -
                Effect: "Allow"
                Action: 
                  - "kms:Decrypt"
                  - "kms:Encrypt"
                  - "kms:GenerateDataKey"
                  - "kms:GenerateDataKeyWithoutPlaintext"
                  - "kms:DescribeKey"
                Resource: !Sub ${CMSymmetricKey.Arn}
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



