28 lines
533 B
Terraform
28 lines
533 B
Terraform
resource "aws_iam_role" "admin-role" {
|
|
name = "xpk-admin-role"
|
|
assume_role_policy = <<EOF
|
|
{
|
|
"Version": "2012-10-17",
|
|
"Statement": [
|
|
{
|
|
"Action": "sts:AssumeRole",
|
|
"Principal": {
|
|
"Service": "ec2.amazonaws.com"
|
|
},
|
|
"Effect": "Allow",
|
|
"Sid": ""
|
|
}
|
|
]
|
|
}
|
|
EOF
|
|
|
|
max_session_duration = 7200
|
|
tags = local.default-tags
|
|
}
|
|
|
|
resource "aws_iam_role_policy_attachment" "roaccess-attach" {
|
|
role = aws_iam_role.admin-role.name
|
|
policy_arn = "arn:aws:iam::aws:policy/ReadOnlyAccess"
|
|
}
|
|
|