Compare commits
1 commit
Author | SHA1 | Date | |
---|---|---|---|
00ee290f29 |
2 changed files with 11 additions and 19 deletions
|
@ -11,28 +11,20 @@ module "aws_iam_ci_user" {
|
||||||
source = "git::ssh://git@git.adyxax.org/adyxax/tofu-module-aws-iam-ci-user?depth=1&ref=1.0.1"
|
source = "git::ssh://git@git.adyxax.org/adyxax/tofu-module-aws-iam-ci-user?depth=1&ref=1.0.1"
|
||||||
|
|
||||||
name = local.name
|
name = local.name
|
||||||
}
|
tests_policy_statements = jsonencode([
|
||||||
|
{
|
||||||
resource "aws_iam_policy" "tftest" {
|
|
||||||
provider = aws.all["root"]
|
|
||||||
|
|
||||||
name = "${local.name}-tftest"
|
|
||||||
policy = jsonencode({
|
|
||||||
Statement = [{
|
|
||||||
Action = "iam:*"
|
Action = "iam:*"
|
||||||
Effect = "Allow"
|
Effect = "Allow"
|
||||||
Resource = [
|
Resource = [
|
||||||
"arn:aws:iam::*:user/tftest-user",
|
"arn:aws:iam::*:user/tftest-user",
|
||||||
"arn:aws:iam::*:policy/${local.name}-tftest",
|
"arn:aws:iam::*:policy/${local.name}-tftest",
|
||||||
]
|
]
|
||||||
}]
|
},
|
||||||
Version = "2012-10-17"
|
{
|
||||||
})
|
# Necessary for removing an IAM user
|
||||||
|
Action = "iam:ListVirtualMFADevices",
|
||||||
|
Effect = "Allow"
|
||||||
|
Resource = "*"
|
||||||
}
|
}
|
||||||
|
])
|
||||||
resource "aws_iam_user_policy_attachment" "tftest" {
|
|
||||||
provider = aws.all["root"]
|
|
||||||
|
|
||||||
policy_arn = aws_iam_policy.tftest.arn
|
|
||||||
user = local.name
|
|
||||||
}
|
}
|
||||||
|
|
|
@ -1,5 +1,5 @@
|
||||||
provider "aws" {
|
provider "aws" {
|
||||||
profile = "root"
|
profile = "tests"
|
||||||
region = "eu-west-3"
|
region = "eu-west-3"
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|
Loading…
Add table
Reference in a new issue