Terraform - Policies 파일 명 변경

2024-01-30 11:12:54 +09:00
parent 66d4cf04a7
commit 7b290f8267
1 changed files with 0 additions and 0 deletions
--- a/terraform/iam/policies/modules/dsk-lambda-execute.tf
+++ b/terraform/iam/policies/modules/dsk-lambda-execute.tf
@@ -0,0 +1,35 @@
+resource "aws_iam_policy" "policy" {
+  name        = "DSK_LambdaExecute"
+  path        = "/"
+
+  policy = jsonencode({
+    "Version": "2012-10-17",
+    "Statement": [
+      {
+        "Effect": "Allow",
+        "Action": [
+          "logs:CreateLogGroup",
+          "logs:CreateLogStream",
+          "logs:PutLogEvents"
+        ],
+        "Resource": "arn:aws:logs:*:*:*"
+      },
+      {
+        "Effect": "Allow",
+        "Action": [
+          "ec2:Start*",
+          "ec2:Stop*"
+        ],
+        "Resource": "*"
+      },
+      {
+        "Sid": "Invoke",
+        "Effect": "Allow",
+        "Action": [
+            "lambda:InvokeFunction"
+        ],
+        "Resource": "*"
+      }
+    ]
+  })
+}