24 lines
595 B
HCL
24 lines
595 B
HCL
data "aws_iam_policy_document" "lambda_assume_role" {
|
|
statement {
|
|
effect = "Allow"
|
|
principals {
|
|
type = "Service"
|
|
identifiers = ["lambda.amazonaws.com"]
|
|
}
|
|
actions = ["sts:AssumeRole"]
|
|
}
|
|
}
|
|
|
|
resource "aws_iam_role" "lambda_role" {
|
|
name = "DSK_Lambda_Role"
|
|
assume_role_policy = data.aws_iam_policy_document.lambda_assume_role.json
|
|
|
|
tags = {
|
|
Name = "dsk-lambda-role"
|
|
}
|
|
}
|
|
|
|
resource "aws_iam_role_policy_attachment" "lambda_role_policy_attach" {
|
|
role = aws_iam_role.lambda_role.name
|
|
policy_arn = var.dsk_lambda_execute_policy
|
|
} |