-
Notifications
You must be signed in to change notification settings - Fork 0
/
locals.tf
59 lines (55 loc) · 1.17 KB
/
locals.tf
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
locals {
module_tags = {
module = "tf-aws-mastodon"
module_var_name = var.name
}
tags = merge(local.module_tags, var.tags)
full_domain_name = "${var.host_name}.${var.primary_domain_name}"
postgres_bucket_interact = jsonencode({
Version = "2012-10-17"
Statement = [
{
Action = [
"s3:ListBucket",
"s3:PutObject",
"s3:GetObject",
"s3:DeleteObject"
]
Effect = "Allow"
Resource = [
aws_s3_bucket.pgbackrest.arn,
"${aws_s3_bucket.pgbackrest.arn}/*"
]
}
]
}
)
ecs_task_bucket_read = jsonencode({
Version = "2012-10-17"
Statement = [
{
Action = [
"s3:Get*",
"s3:Put*",
]
Effect = "Allow"
Resource = [
module.s3.s3_arn,
"${module.s3.s3_arn}/*",
]
},
{
Action = [
"kms:Decrypt"
]
Effect = "Allow"
Resource = [
data.aws_kms_alias.ssm_session_manager.target_key_arn
]
}
]
})
}
data "aws_kms_alias" "ssm_session_manager" {
name = "alias/ssm-session-manager"
}