s3control-controller\Add access point policy support #2385
Description
Hello, i'm using s3control-controller to manage s3 access point
apiVersion: s3control.services.k8s.aws/v1alpha1
kind: AccessPoint
metadata:
name: my-s3-access-point
namespace: default
spec:
accountID: '123456789'
bucket: my-bucket-name
bucketAccountID: '123456789'
name: my-access-point-name
publicAccessBlockConfiguration:
blockPublicACLs: true
blockPublicPolicy: true
ignorePublicACLs: true
restrictPublicBuckets: true
Today, it's not possible to manage the access point policy for this s3 access point.
Is it possible to implement this property ?
My solution would be to add a property named '' accessPointPolicyDocument" accepting a json formated document, like:
apiVersion: s3control.services.k8s.aws/v1alpha1
kind: AccessPoint
metadata:
name: my-s3-access-point
namespace: default
spec:
accountID: '123456789'
bucket: my-bucket-name
bucketAccountID: '123456789'
name: my-access-point-name
publicAccessBlockConfiguration:
blockPublicACLs: true
blockPublicPolicy: true
ignorePublicACLs: true
restrictPublicBuckets: true
policyDocument: >-
{"Version": "2012-10-17","Statement": [{"Effect": "Allow","Principal": {"AWS": "arn:aws:iam::123456789:role/my-authorized-role"},"Action": ["s3:ListBucket","s3:GetObject","s3:PutObject"],"Resource": ["arn:aws:s3:my-aws-region:123456789:accesspoint/my-access-point-name","arn:aws:s3:my-aws-region:123456789:accesspoint/my-access-point-name/my/specific/path/*"]}]}
Thanks for your help on this !