docs(backup): name the bucket listing the restore drill needs

The drill section said the drill needs nothing beyond the uploader's
GetObject and ListBucket, but the documented uploader grant is PutObject,
GetObject and AbortMultipartUpload. The drill lists the bucket to find the
newest object, so ListBucket is an addition, not something already granted.
This commit is contained in:
Marc-André Bombeck committed 2026-09-26 01:10:13 +02:00
1 parent d5a39603ca
commit f55bd49f8d
1 file changed
+4 -2
+4 -2
View File
@@ -361,5 +361,7 @@ Outcomes:
- **Not configured** — deployments without the `BACKUP_S3_*` vars skip
silently (wide-event warning only).
The drill needs no IAM grant beyond the uploader's existing
`GetObject` + `ListBucket`.
The drill lists the bucket to find the newest object, so it needs
`ListBucket` on top of the uploader's `PutObject`, `GetObject` and
`AbortMultipartUpload`. Cloudflare R2's **Object Read & Write** token covers
all four.