Update s3-lambda-agentcore/deploy.tf

Co-authored-by: Marco <marco.jahn@gmail.com>

Author: burdeazy

s3-lambda-agentcore/deploy.tf

@@ -78,13 +78,22 @@ statement {
   ]
 }
   statement {
-    actions = [
-      "s3:GetObject",
-      "s3:ListBucket"
-    ]
-    effect    = "Allow"
-    resources = ["*"]
-  }
+  actions = [
+    "s3:GetObject"
+  ]
+  effect    = "Allow"
+  resources = [
+    "${aws_s3_bucket.input_bucket.arn}/*"
+  ]
+}
+statement {
+  actions = [
+    "s3:ListBucket"
+  ]
+  effect    = "Allow"
+  resources = [
+    aws_s3_bucket.input_bucket.arn
+  ]
 }
 
 resource "aws_iam_role" "agentcore_role" {