idanoo/fediservices.nz-infra
1
0
Fork 0
mirror of https://github.com/idanoo/fediservices.nz-infra synced 2025-07-01 22:02:15 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Create infra

Browse source
This commit is contained in:
Daniel Mason 2023-04-22 13:17:41 +12:00
parent 1bb150d44e
commit 2d32a3c4bb
Signed by: idanoo
GPG key ID: 387387CDBC02F132
9 changed files with 278 additions and 34 deletions
Download patch file Download diff file Expand all files Collapse all files

93
iam.tf Normal file
View file

@ -0,0 +1,93 @@
resource "aws_iam_role" "role" {
name = "status"
assume_role_policy = <<EOF
{
"Version": "2012-10-17",
"Statement": [
{
"Action": "sts:AssumeRole",
"Principal": {
"Service": "ec2.amazonaws.com"
},
"Effect": "Allow",
"Sid": ""
}
]
}
EOF
}
resource "aws_iam_instance_profile" "profile" {
name = "status"
role = aws_iam_role.role.name
}
resource "aws_iam_role_policy" "policy" {
name = aws_iam_role.role.name
role = aws_iam_role.role.id
policy = <<EOF
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": [
"logs:PutLogEvents",
"logs:CreateLogGroup",
"logs:CreateLogStream",
"logs:DescribeLogGroups",
"logs:DescribeLogStreams"
],
"Resource": "*"
},
{
"Effect": "Allow",
"Action": [
"ec2:AttachVolume",
"ec2:CreateTags",
"ec2:DetachVolume",
"ec2:DescribeVolumes",
"ec2:DescribeInstances",
"ec2:TerminateInstances"
],
"Resource": "*"
},
{
"Effect": "Allow",
"Action": [
"ssm:DescribeAssociation",
"ssm:GetDeployablePatchSnapshotForInstance",
"ssm:GetDocument",
"ssm:DescribeDocument",
"ssm:GetManifest",
"ssm:GetParameter",
"ssm:GetParameters",
"ssm:ListAssociations",
"ssm:ListInstanceAssociations",
"ssm:PutInventory",
"ssm:PutComplianceItems",
"ssm:PutConfigurePackageResult",
"ssm:UpdateAssociationStatus",
"ssm:UpdateInstanceAssociationStatus",
"ssm:UpdateInstanceInformation"
],
"Resource": "*"
},
{
"Effect": "Allow",
"Action": [
"ssmmessages:CreateControlChannel",
"ssmmessages:CreateDataChannel",
"ssmmessages:OpenControlChannel",
"ssmmessages:OpenDataChannel"
],
"Resource": "*"
}
]
}
EOF
}