mirror of
https://github.com/dap-ps/infra-dapps.git
synced 2025-02-24 01:48:15 +00:00
42 lines
708 B
HCL
42 lines
708 B
HCL
resource "aws_iam_user" "main" {
|
|
name = var.bucket_name
|
|
|
|
tags = {
|
|
Description = "User for ${var.bucket_name} S3 bucket"
|
|
}
|
|
}
|
|
|
|
resource "aws_iam_access_key" "main" {
|
|
user = aws_iam_user.main.name
|
|
pgp_key = file("files/support@dap.ps.gpg")
|
|
}
|
|
|
|
resource "aws_s3_bucket" "main" {
|
|
bucket = var.bucket_name
|
|
acl = "private"
|
|
|
|
tags = {
|
|
Name = var.bucket_name
|
|
Desc = var.description
|
|
}
|
|
|
|
lifecycle {
|
|
prevent_destroy = true
|
|
}
|
|
|
|
policy = <<EOF
|
|
{
|
|
"Version": "2012-10-17",
|
|
"Statement": [
|
|
{
|
|
"Effect": "Allow",
|
|
"Principal": {"AWS": ["${aws_iam_user.main.arn}"]},
|
|
"Action": ["s3:*"],
|
|
"Resource":["arn:aws:s3:::${var.bucket_name}/*"]
|
|
}
|
|
]
|
|
}
|
|
EOF
|
|
|
|
}
|