src/lambda_codebase/initial_commit/bootstrap_repository/adf-bootstrap/deployment/global.yml [212:237]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
      PolicyDocument:
        Version: "2012-10-17"
        Statement:
          - Effect: Allow
            Sid: "S3"
            Action:
              - s3:Get*
              - s3:GetBucketPolicy
              - s3:List*
              - s3:PutObject
            Resource:
              - !Sub arn:${AWS::Partition}:s3:::${PipelineBucket}
              - !Sub arn:${AWS::Partition}:s3:::${PipelineBucket}/*
              - !Sub arn:${AWS::Partition}:s3:::${SharedModulesBucket}
              - !Sub arn:${AWS::Partition}:s3:::${SharedModulesBucket}/*
          - Effect: Allow
            Sid: "KMS"
            Action:
              - kms:Decrypt
              - kms:DescribeKey
              - kms:Encrypt
              - kms:GenerateDataKey*
              - kms:ReEncrypt*
            Resource: !GetAtt KMSKey.Arn
          - Effect: Allow
            Action:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



src/lambda_codebase/initial_commit/bootstrap_repository/adf-bootstrap/deployment/global.yml [302:327]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
      PolicyDocument:
        Version: "2012-10-17"
        Statement:
          - Effect: Allow
            Sid: "S3"
            Action:
              - s3:Get*
              - s3:GetBucketPolicy
              - s3:List*
              - s3:PutObject
            Resource:
              - !Sub arn:${AWS::Partition}:s3:::${PipelineBucket}
              - !Sub arn:${AWS::Partition}:s3:::${PipelineBucket}/*
              - !Sub arn:${AWS::Partition}:s3:::${SharedModulesBucket}
              - !Sub arn:${AWS::Partition}:s3:::${SharedModulesBucket}/*
          - Effect: Allow
            Sid: "KMS"
            Action:
              - kms:Decrypt
              - kms:DescribeKey
              - kms:Encrypt
              - kms:GenerateDataKey*
              - kms:ReEncrypt*
            Resource: !GetAtt KMSKey.Arn
          - Effect: Allow
            Action:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



