Terraform - IAM user, role, policies 최신화

2024-01-30 17:46:36 +09:00
parent 886e60ab28
commit f3e9a26a95
11 changed files with 115 additions and 49 deletions
--- a/terraform/iam/policies/modules/agent-s3.tf
+++ b/terraform/iam/policies/modules/agent-s3.tf
@@ -0,0 +1,23 @@
+resource "aws_iam_policy" "agent_s3_policy" {
+  name        = "DSK_Agent_S3FullAccess"
+  path        = "/"
+
+  policy = jsonencode({
+    "Version": "2012-10-17",
+    "Statement": [
+      {
+        "Effect": "Allow",
+        "Action": [
+          "s3:*",
+          "s3-object-lambda:*"
+        ],
+        "Resource": [
+          "arn:aws:s3:::dsk-agent-s3",
+          "arn:aws:s3:::dsk-agent-s3/*",
+          "arn:aws:s3:::dsk-middleware-backup",
+          "arn:aws:s3:::dsk-middleware-backup/*"
+        ]
+      }
+    ]
+  })
+}