Cross-account replication fix (#69)

cloudposse · Feb 8, 2021 · 0cbf446 · 0cbf446
1 parent 8fa399e
commit 0cbf446
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/replication.tf b/replication.tf
@@ -52,7 +52,8 @@ data "aws_iam_policy_document" "replication" {
       "s3:ReplicateObject",
       "s3:ReplicateDelete",
       "s3:ReplicateTags",
-      "s3:GetObjectVersionTagging"
+      "s3:GetObjectVersionTagging",
+      "s3:ObjectOwnerOverrideToBucketOwner"
     ]
 
     resources = ["${var.s3_replica_bucket_arn}/*"]