github.com/pachyderm/pachyderm@v1.13.4/etc/deploy/cloudfront/bucket-policy-secure.json.template (about)

     1  {
     2      "Version": "2012-10-17",
     3      "Statement": [
     4          {
     5              "Sid": "PokeHoleForCloudfrontOAI",
     6              "Effect": "Allow",
     7              "Principal": {
     8                  "CanonicalUser": "XXCLOUDFRONT_OAI_CANONICALXX"
     9              },
    10              "Action": "s3:GetObject",
    11              "Resource": "arn:aws:s3:::XXBUCKET_NAMEXX/*"
    12          }
    13      ]
    14  }