Difference between revisions of "Terraform data source: aws iam policy document"
Jump to navigation
Jump to search
| (10 intermediate revisions by 3 users not shown) | |||
| Line 1: | Line 1: | ||
| + | * https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/iam_policy_document | ||
| + | == Examples == | ||
| + | {{aws s3 bucket policy example}} | ||
| + | == Related == | ||
| + | * Terraform resource: <code>[[aws_iam_policy]]</code> | ||
| + | * <code>[[aws_iam_role]]</code> | ||
| + | * <code>[[aws_iam_role_policy_attachment]]</code> | ||
| + | * <code>[[PublicReadGetObject]]</code> | ||
== See also == | == See also == | ||
| − | |||
* {{terraform aws data sources}} | * {{terraform aws data sources}} | ||
| + | * {{tf s3}} | ||
[[Category:Terraform]] | [[Category:Terraform]] | ||
Revision as of 09:28, 12 June 2024
Examples
resource "aws_s3_bucket" "example" { bucket = "my-tf-test-bucket" } resource "aws_s3_bucket_policy" "allow_access_from_another_account" { bucket = aws_s3_bucket.example.id policy = data.aws_iam_policy_document.allow_access_from_another_account.json } data "aws_iam_policy_document" "allow_access_from_another_account" { statement { principals { type = "AWS" identifiers = ["123456789012"] } actions = [ "s3:GetObject", "s3:ListBucket", ] resources = [ aws_s3_bucket.example.arn, "${aws_s3_bucket.example.arn}/*", ] } }
Related
- Terraform resource:
aws_iam_policy aws_iam_roleaws_iam_role_policy_attachmentPublicReadGetObject
See also
- AWS Data sources:
aws_region,aws_vpc,aws_caller_identity,aws_availability_zones,aws_eip,aws_flow_log,template_file, aws_ami - Terraform S3 resources:
aws_s3_bucket, aws_s3_object, aws_s3_bucket_policy, aws_s3_bucket_acl, aws_s3_bucket_website_configuration, aws_s3_bucket cors_configuration, aws_s3_account_public_access_block, Terraform module: s3-bucket,aws_s3_bucket_versioning, aws_s3_bucket_server_side_encryption_configuration, aws_s3_bucket_logging
Advertising:
