pymongo arrow bucket

mongodb · Mar 20, 2024 · d8b0902 · d8b0902
1 parent 88e4cf3
commit d8b0902
Show file tree

Hide file tree

Showing 2 changed files with 45 additions and 0 deletions.
diff --git a/infrastructure/ecs-main/buckets.yml b/infrastructure/ecs-main/buckets.yml
@@ -174,6 +174,19 @@ Resources:
           IndexDocument: index.html
           ErrorDocument: ${self:custom.site.errorDoc.${self:provider.stage}, null}
 
+  PymongoArrowBucket:
+    Type: "AWS::S3::Bucket"
+    Properties:
+      PublicAccessBlockConfiguration:
+        BlockPublicAcls: false
+        BlockPublicPolicy: false
+        IgnorePublicAcls: false
+        RestrictPublicBuckets: false
+      BucketName: ${self:custom.pymongoArrowBucketName}
+      WebsiteConfiguration:
+          IndexDocument: index.html
+          ErrorDocument: ${self:custom.site.errorDoc.${self:provider.stage}, null}
+
   DocsBucketPolicy:
     Type: AWS::S3::BucketPolicy
     Properties:
@@ -415,3 +428,33 @@ Resources:
             Action: 's3:PutObject'
             Resource:
               - Fn::Join: ['', [{ "Fn::GetAtt": ["CSharpBucket", "Arn" ] }, '/*']]
+
+  PymongoArrowBucketPolicy:
+    Type: AWS::S3::BucketPolicy
+    Properties:
+      Bucket:
+        Ref: PymongoArrowBucket
+      PolicyDocument:
+        Statement:
+          - Sid: PublicReadGetObject
+            Effect: Allow
+            Principal: "*"
+            Action:
+              - s3:GetObject
+            Resource:
+            - Fn::Join: ['', [{ "Fn::GetAtt": ["PymongoArrowBucket", "Arn" ] }, '/*']]
+          - Effect: Allow
+            Principal:
+              AWS: arn:aws:iam::${aws:accountId}:role/docs-archive-job-${self:provider.stage}-batch
+            Action:
+              - 's3:GetObject'
+              - 's3:ListBucket'
+            Resource:
+              - Fn::Join: ['', [{ "Fn::GetAtt": ["PymongoArrowBucket", "Arn" ] }, '/*']]
+              - Fn::Join: ['', [{ "Fn::GetAtt": ["PymongoArrowBucket", "Arn" ] }]]
+          - Effect: Allow
+            Principal:
+              AWS: arn:aws:iam::${aws:accountId}:role/docs-deploy-job-${self:provider.stage}-batch
+            Action: 's3:PutObject'
+            Resource:
+              - Fn::Join: ['', [{ "Fn::GetAtt": ["PymongoArrowBucket", "Arn" ] }, '/*']]
diff --git a/infrastructure/ecs-main/serverless.yml b/infrastructure/ecs-main/serverless.yml
@@ -126,6 +126,8 @@ custom:
   javaIntgrBucketName: docs-java-intgr
   nodeBucketName: docs-node-${self:provider.stage}
   nodeIntgrBucketName: docs-node-intgr
+  pymongoArrowBucketName: docs-pymongo-arrow-${self:provider.stage}
+  pymongoArrowIntgrBucketName: docs-pymongo-arrow-intgr
   jobCollection:  ${ssm:/env/${self:provider.stage}/docs/worker_pool/atlas/collections/job/queue}
   repoBranchesCollection: ${ssm:/env/${self:provider.stage}/docs/worker_pool/atlas/collections/repo}
   docsetsCollection: ${ssm:/env/${self:provider.stage}/docs/worker_pool/atlas/collections/docsets}