fix: Updated principal in bucket policy to require SSL from all sources.

codeforamerica · Feb 11, 2025 · 8c2eb8d · 8c2eb8d
1 parent f9d1691
commit 8c2eb8d
Showing 1 changed file with 1 addition and 3 deletions.
diff --git a/templates/bucket-policy.json.tftpl b/templates/bucket-policy.json.tftpl
@@ -4,9 +4,7 @@
         {
             "Sid": "AllowSSLRequestsOnly",
             "Effect": "Deny",
-            "Principal": {
-                "Service": "config.amazonaws.com"
-            },
+            "Principal": "*",
             "Action": [
                 "s3:*"
             ],