xdr-terraform-modules/thirdparty/terraform-aws-github-runner/modules/runner-binaries-syncer/policies/lambda-syncer.json

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "s3:GetObjectTagging",
        "s3:GetObjectVersionTagging",
        "s3:PutObject",
        "s3:PutObjectTagging"
      ],
      "Resource": ["${s3_resource_arn}"]
    }
  ]
}