Add IAM policy for hydra-queue-runner
Eelco Dolstra committed
May 21, 2020 at 19:10 UTC
5ff66bb52b2563642d754678756dd847c8181d40
1 file changed
+19
ngi0/terraform/hydra-user.tf
+19
@@ -6,3 +6,22 @@ resource "aws_iam_user" "hydra" {
6
resource "aws_iam_access_key" "hydra" {
7
user = aws_iam_user.hydra.name
8
}
9
+
10
+resource "aws_iam_user_policy" "hydra" {
11
+ name = "test"
12
+ user = aws_iam_user.hydra.name
13
+
14
+ policy = <<EOF
15
+{
16
+ "Version": "2012-10-17",
17
+ "Statement": [
18
+ {
19
+ "Sid": "Stmt1590080325117",
20
+ "Action": "s3:*",
21
+ "Effect": "Allow",
22
+ "Resource": "*"
23
+ }
24
+ ]
25
+}
26
+EOF
27
+}