18 lines
869 B
HCL
Executable File
18 lines
869 B
HCL
Executable File
terraform {
|
|
backend "s3" {
|
|
bucket = "navi-bank-terraform-nonprod-state"
|
|
region = "ap-south-1"
|
|
key = "service-iam-roles"
|
|
workspace_key_prefix = "iamroles/dev/foo-navi-service"
|
|
profile = "nonprod"
|
|
acl = "bucket-owner-full-control"
|
|
}
|
|
}
|
|
|
|
module "iam-role" {
|
|
source = "git::ssh://git@github.cmd.navi-tech.in/navi-infra/iam-roles.git?ref=cef39cc18b5dd3095cf6969dabfe1cfe09500390"
|
|
environment = "dev"
|
|
service_role = {"policies":[{"actions":["s3:GetObject","s3:PutObject"],"resource":"arn:aws:s3:::navi-e3e2a9bfd88566b05001b02a3f51d286/*"},{"actions":["s3:GetObject","s3:PutObject"],"resource":"*"},{"actions":["sns:Publish","sns:SetSMSAttributes"],"resource":"arn:aws:s3:::arn:aws:s3:::test-bucket-to-be-deleted/*"}]}
|
|
role_name = "foo-navi-service"
|
|
}
|