From 9a813476a3b8bbb87c9b95be3140f74bdc3dd02f Mon Sep 17 00:00:00 2001
From: Mike VanDenburgh <37340715+mvandenburgh@users.noreply.github.com>
Date: Wed, 17 Apr 2024 15:21:31 -0400
Subject: [PATCH] Give heroku user `s3:PutObjectTagging` permission

---
 terraform/modules/dandiset_bucket/main.tf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/terraform/modules/dandiset_bucket/main.tf b/terraform/modules/dandiset_bucket/main.tf
index 10d69cb..3a2b2c7 100644
--- a/terraform/modules/dandiset_bucket/main.tf
+++ b/terraform/modules/dandiset_bucket/main.tf
@@ -116,7 +116,7 @@ data "aws_iam_policy_document" "dandiset_bucket_owner" {
         "${aws_s3_bucket.dandiset_bucket.arn}/*",
       ]
 
-      actions = ["s3:PutObject"]
+      actions = ["s3:PutObject", "s3:PutObjectTagging"]
     }
   }