Implement verified weekly archives and SQLite inventory reporting

2026-10-03 19:42:42 +02:00
commit 885f618e66
36 changed files with 3077 additions and 0 deletions
@@ -0,0 +1,34 @@
+{
+  "Version": "2012-10-17",
+  "Statement": [
+    {
+      "Effect": "Allow",
+      "Action": ["s3:GetBucketVersioning"],
+      "Resource": "arn:aws:s3:::btcdata-archive"
+    },
+    {
+      "Effect": "Allow",
+      "Action": ["s3:ListBucket", "s3:ListBucketVersions", "s3:ListBucketMultipartUploads"],
+      "Resource": "arn:aws:s3:::btcdata-archive",
+      "Condition": {"StringLike": {"s3:prefix": ["btcprod/weeks/", "btcprod/weeks/*"]}}
+    },
+    {
+      "Effect": "Allow",
+      "Action": ["s3:GetObject", "s3:GetObjectVersion", "s3:PutObject", "s3:AbortMultipartUpload", "s3:ListMultipartUploadParts"],
+      "Resource": "arn:aws:s3:::btcdata-archive/btcprod/weeks/*"
+    },
+    {
+      "Effect": "Deny",
+      "Action": ["admin:*"]
+    },
+    {
+      "Effect": "Deny",
+      "Action": ["sts:*"]
+    },
+    {
+      "Effect": "Deny",
+      "Action": ["s3:DeleteObject", "s3:DeleteObjectVersion", "s3:DeleteBucket", "s3:PutBucketVersioning"],
+      "Resource": ["arn:aws:s3:::*", "arn:aws:s3:::*/*"]
+    }
+  ]
+}