Update permissions and download location of the zip file.

playbooks/roles/edxapp/tasks/deploy.yml

@@ -341,18 +341,21 @@
     bucket="{{ EDXAPP_XML_S3_BUCKET }}"
     object="{{ EDXAPP_XML_S3_KEY }}"
     mode="geturl"
-    expiration=300
+    expiration=30
   when: not EDXAPP_XML_FROM_GIT and EDXAPP_XML_S3_BUCKET and EDXAPP_XML_S3_KEY
   register: s3_one_time_url
 
 - name: download from one time url
-  get_url: url="{{ s3_one_time_url.url }}" dest="/tmp/{{ EDXAPP_XML_S3_KEY|basename }}"
+  get_url: 
+    url="{{ s3_one_time_url.url }}"
+    dest="{{ edxapp_data_dir }}/{{ EDXAPP_XML_S3_KEY|basename }}"
+    mode=0600
   when: not EDXAPP_XML_FROM_GIT and EDXAPP_XML_S3_BUCKET and EDXAPP_XML_S3_KEY
   register: download_xml_s3
 
 - name: unzip the data to the data dir
   shell: >
-    tar xzf /tmp/{{ EDXAPP_XML_S3_KEY|basename }}
+    tar xzf {{ edxapp_data_dir }}/{{ EDXAPP_XML_S3_KEY|basename }}
     chdir="{{ edxapp_data_dir }}"
   when: download_xml_s3.changed