security: restrict MinIO app to one bucket

2026-09-12 16:01:00 +07:00
parent 926182a6cf
commit 868278fdba
10 changed files with 23 additions and 15 deletions
@@ -6,6 +6,7 @@ from typing import Any
 from sqlalchemy import func, select, text
 from sqlalchemy.orm import Session

+from .config import settings
 from .models import CommunityImportRun, DataSource, ImportStatus, OfficialRecordImport


@@ -32,7 +33,7 @@ def readiness_report(
        ready = False

    try:
-        s3.list_buckets()
+        s3.head_bucket(Bucket=settings.s3_bucket)
        components["minio"] = {"status": "ready"}
    except Exception:
        components["minio"] = {"status": "unavailable"}