93 lines
1.9 KiB
HCL
93 lines
1.9 KiB
HCL
resource "aws_iam_instance_profile" "catherine_fc_profile" {
|
|
name_prefix = "${var.basename}-"
|
|
role = aws_iam_role.instance.name
|
|
}
|
|
|
|
resource "aws_iam_role" "instance" {
|
|
name = "${var.basename}-${terraform.workspace}"
|
|
path = "/"
|
|
|
|
assume_role_policy = <<EOF1
|
|
{
|
|
"Version": "2012-10-17",
|
|
"Statement": [
|
|
{
|
|
"Action": "sts:AssumeRole",
|
|
"Principal": {
|
|
"Service": "ec2.amazonaws.com"
|
|
},
|
|
"Effect": "Allow"
|
|
}
|
|
]
|
|
}
|
|
EOF1
|
|
|
|
tags = var.tags
|
|
}
|
|
|
|
resource "aws_iam_role_policy" "catherine_fc_autoscaling" {
|
|
name = "catherine_fc_autoscaling_policy"
|
|
role = aws_iam_role.instance.id
|
|
policy = <<EOF2
|
|
{
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"autoscaling:UpdateAutoScalingGroup"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"${var.asg_arn}"
|
|
]
|
|
}
|
|
],
|
|
"Version": "2012-10-17"
|
|
}
|
|
EOF2
|
|
}
|
|
|
|
resource "aws_iam_role_policy" "catherine_fc_ec2" {
|
|
name = "catherine_fc_ec2_policy"
|
|
role = aws_iam_role.instance.id
|
|
policy = <<EOF4
|
|
{
|
|
"Version": "2012-10-17",
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"ec2:DescribeInstances",
|
|
"ec2:DescribeTags"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"*"
|
|
]
|
|
}
|
|
]
|
|
}
|
|
EOF4
|
|
}
|
|
|
|
resource "aws_iam_role_policy" "catherine_fc_s3" {
|
|
name = "catherine_fc_s3_policy"
|
|
role = aws_iam_role.instance.id
|
|
policy = <<EOF5
|
|
{
|
|
"Version": "2012-10-17",
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"s3:GetObjectAcl",
|
|
"s3:GetObject",
|
|
"s3:ListBucket"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:s3:::catherine-fc-*"
|
|
]
|
|
}
|
|
]
|
|
}
|
|
EOF5
|
|
}
|