moved images to s3 and added terraform scripts

infra/terraform/modules/catherine-fc/main/iam.tf

@@ -0,0 +1,97 @@
+resource "aws_iam_instance_profile" "catherine_fc_profile" {
+  name_prefix = "${var.basename}-"
+  role = aws_iam_role.instance.name
+}
+
+resource "aws_iam_role" "instance" {
+    name = "${var.basename}-${terraform.workspace}"
+    path = "/"
+
+    assume_role_policy = <<EOF1
+{
+    "Version": "2012-10-17",
+    "Statement": [
+        {
+            "Action": "sts:AssumeRole",
+            "Principal": {
+                "Service": "ec2.amazonaws.com"
+            },
+            "Effect": "Allow"
+        }
+    ]
+}
+EOF1
+
+    tags = var.tags
+}
+
+resource "aws_iam_role_policy" "catherine_fc_autoscaling" {
+    name = "catherine_fc_autoscaling_policy"
+    role = aws_iam_role.instance.id
+    policy = <<EOF2
+{
+    "Statement": [
+        {
+            "Action": [
+                "autoscaling:UpdateAutoScalingGroup"
+            ],
+            "Effect": "Allow",
+            "Resource": [
+                "${var.asg_arn}"
+            ]
+        }
+    ],
+    "Version": "2012-10-17"
+}
+EOF2
+}
+
+resource "aws_iam_role_policy" "catherine_fc_ec2" {
+    name = "catherine_fc_ec2_policy"
+    role = aws_iam_role.instance.id
+    policy = <<EOF4
+{
+    "Version": "2012-10-17",
+    "Statement": [
+        {
+            "Action": [
+                "ec2:DescribeInstances",
+                "ec2:DescribeTags"
+            ],
+            "Effect": "Allow",
+            "Resource": [
+                "*"
+            ]
+        }
+    ]
+}
+EOF4
+}
+
+resource "aws_iam_role_policy" "catherine_fc_s3" {
+    name = "catherine_fc_s3_policy"
+    role = aws_iam_role.instance.id
+    policy = <<EOF5
+{
+    "Version": "2012-10-17",
+    "Statement": [
+        {
+            "Action": [
+                "s3:GetObjectAcl",
+                "s3:GetObject",
+                "s3:ListBucket"
+            ],
+            "Effect": "Allow",
+            "Resource": [
+                "arn:aws:s3:::catherine-fc-*"
+            ]
+        }
+    ]
+}
+EOF5
+}
+
+resource "aws_iam_role_policy_attachment" "GOV_ssm_basic" {
+    role = aws_iam_role.instance.id
+    policy_arn = "arn:aws:iam::${data.aws_caller_identity.self.account_id}:policy/GOV_ssm_basic"
+}