Files
dsk-iac/terraform/iam/policies/modules/api-s3.tf
2024-01-31 14:49:43 +09:00

23 lines
510 B
HCL

resource "aws_iam_policy" "api_s3_policy" {
name = "DSK_API_S3FullAccess"
path = "/"
policy = jsonencode({
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": [
"s3:*",
"s3-object-lambda:*"
],
"Resource": [
"arn:aws:s3:::dsk-metering",
"arn:aws:s3:::dsk-metering/*",
"arn:aws:s3:::dsk-alert-images",
"arn:aws:s3:::dsk-alert-images/*"
]
}
]
})
}