This repository has been archived by the owner on Mar 4, 2024. It is now read-only.
-
Notifications
You must be signed in to change notification settings - Fork 11
/
main.tf
62 lines (52 loc) · 1.9 KB
/
main.tf
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
terraform {
required_version = ">=0.11.0"
}
resource "aws_iam_instance_profile" "main" {
name = "${var.name}Profile"
path = "${var.path}"
role = "${aws_iam_role.main.name}"
}
resource "aws_iam_role" "main" {
name = "${var.name}Role"
path = "${var.path}"
description = "Role assigned to the ${var.name}Profile instance profile (generated by Terraform)"
assume_role_policy = "${data.aws_iam_policy_document.assume_role.json}"
tags = "${var.tags}"
}
data "aws_iam_policy_document" "assume_role" {
statement {
effect = "Allow"
principals {
type = "Service"
identifiers = ["ec2.amazonaws.com"]
}
actions = ["sts:AssumeRole"]
}
}
resource "aws_iam_policy" "user_policies" {
name = "${var.name}Policy-${count.index}"
path = "${var.path}"
description = "User-managed policy assigned to the ${var.name}Role role (generated by Terraform)"
policy = "${var.policy_jsons[count.index]}"
count = "${length(var.policy_jsons)}"
}
resource "aws_iam_role_policy_attachment" "user_policies" {
role = "${aws_iam_role.main.name}"
policy_arn = "${element(aws_iam_policy.user_policies.*.arn, count.index)}"
count = "${length(var.policy_jsons)}"
}
resource "aws_iam_role_policy_attachment" "ssm_policy" {
role = "${aws_iam_role.main.name}"
policy_arn = "arn:aws:iam::aws:policy/AmazonSSMManagedInstanceCore"
count = "${var.attach_ssm_policy ? 1 : 0}"
}
resource "aws_iam_role_policy_attachment" "cwagent_policy" {
role = "${aws_iam_role.main.name}"
policy_arn = "arn:aws:iam::aws:policy/CloudWatchAgentServerPolicy"
count = "${var.attach_cwagent_policy ? 1 : 0}"
}
resource "aws_iam_role_policy_attachment" "attached_policies" {
role = "${aws_iam_role.main.name}"
policy_arn = "${var.policy_arns[count.index]}"
count = "${length(var.policy_arns)}"
}