Provides an IAM policy attached to a group.
resource "aws_iam_group_policy" "my_developer_policy" { name = "my_developer_policy" group = "${aws_iam_group.my_developers.id}" policy = <<EOF { "Version": "2012-10-17", "Statement": [ { "Action": [ "ec2:Describe*" ], "Effect": "Allow", "Resource": "*" } ] } EOF } resource "aws_iam_group" "my_developers" { name = "developers" path = "/users/" }
The following arguments are supported:
policy
- (Required) The policy document. This is a JSON formatted string. The heredoc syntax or file
function is helpful here. name
- (Optional) The name of the policy. If omitted, Terraform will assign a random, unique name. name_prefix
- (Optional) Creates a unique name beginning with the specified prefix. Conflicts with name
. group
- (Required) The IAM group to attach to the policy. id
- The group policy ID. group
- The group to which this policy applies. name
- The name of the policy. policy
- The policy document attached to the group.
© 2018 HashiCorpLicensed under the MPL 2.0 License.
https://www.terraform.io/docs/providers/aws/r/iam_group_policy.html