chore(infrastructure): bootstrap CI

infrastructure/tofu/main.tf

@@ -0,0 +1,38 @@
+locals {
+  name = "tofu-module-aws-iam-user"
+}
+
+module "aws_iam_ci_user" {
+  providers = {
+    aws.core  = aws.all["core"]
+    aws.root  = aws.all["root"]
+    aws.tests = aws.all["tests"]
+  }
+  source = "git::ssh://git@git.adyxax.org/adyxax/tofu-module-aws-iam-ci-user?depth=1&ref=1.0.1"
+
+  name = local.name
+}
+
+resource "aws_iam_policy" "tftest" {
+  provider = aws.all["root"]
+
+  name = "${local.name}-tftest"
+  policy = jsonencode({
+    Statement = [{
+      Action = "iam:*"
+      Effect = "Allow"
+      Resource = [
+        "arn:aws:iam::*:user/tftest-user",
+        "arn:aws:iam::*:policy/${local.name}-tftest",
+      ]
+    }]
+    Version = "2012-10-17"
+  })
+}
+
+resource "aws_iam_user_policy_attachment" "tftest" {
+  provider = aws.all["root"]
+
+  policy_arn = aws_iam_policy.tftest.arn
+  user       = local.name
+}