From ad84baf5ea635a37e99d04f1d27b2d4e799f71fd Mon Sep 17 00:00:00 2001 From: davendu Date: Sun, 28 May 2023 15:13:45 +0800 Subject: [PATCH 1/2] docs/backends/cos: add necessary permission list for using the backend --- website/docs/language/settings/backends/cos.mdx | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/website/docs/language/settings/backends/cos.mdx b/website/docs/language/settings/backends/cos.mdx index 67c5686efc..1d04d6d189 100644 --- a/website/docs/language/settings/backends/cos.mdx +++ b/website/docs/language/settings/backends/cos.mdx @@ -9,7 +9,10 @@ description: >- Stores the state as an object in a configurable prefix in a given bucket on [Tencent Cloud Object Storage](https://intl.cloud.tencent.com/product/cos) (COS). -This backend supports [state locking](/terraform/language/state/locking). +This backend supports [state locking](/terraform/language/state/locking). You need following permissions for your credentials: + +* `CreateTag`, `DeleteTag` and `DescribeTags` on the tag key `tencentcloud-terraform-lock`. +* `Put`, `Get` and `Delete` files under the given prefix of the bucket. ~> **Warning!** It is highly recommended that you enable [Object Versioning](https://intl.cloud.tencent.com/document/product/436/19883) on the COS bucket to allow for state recovery in the case of accidental deletions and human error. From 8b8a4c4a95a3d9d826d90875b8514d886ddd72e2 Mon Sep 17 00:00:00 2001 From: Daven Du Date: Fri, 16 Jun 2023 21:00:01 +0800 Subject: [PATCH 2/2] Apply suggestions from code review Better expression. Co-authored-by: Rose M Koron <32436232+rkoron007@users.noreply.github.com> --- website/docs/language/settings/backends/cos.mdx | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/website/docs/language/settings/backends/cos.mdx b/website/docs/language/settings/backends/cos.mdx index 1d04d6d189..7e47ae7f4b 100644 --- a/website/docs/language/settings/backends/cos.mdx +++ b/website/docs/language/settings/backends/cos.mdx @@ -9,10 +9,10 @@ description: >- Stores the state as an object in a configurable prefix in a given bucket on [Tencent Cloud Object Storage](https://intl.cloud.tencent.com/product/cos) (COS). -This backend supports [state locking](/terraform/language/state/locking). You need following permissions for your credentials: +This backend supports [state locking](/terraform/language/state/locking). Storing your state in a COS bucket requires the following permissions: -* `CreateTag`, `DeleteTag` and `DescribeTags` on the tag key `tencentcloud-terraform-lock`. -* `Put`, `Get` and `Delete` files under the given prefix of the bucket. +- `CreateTag`, `DeleteTag`, and `DescribeTags` on the tag key `tencentcloud-terraform-lock` +- `Put`, `Get`, and `Delete` files for the specified bucket's prefix ~> **Warning!** It is highly recommended that you enable [Object Versioning](https://intl.cloud.tencent.com/document/product/436/19883) on the COS bucket to allow for state recovery in the case of accidental deletions and human error.