Provides an IAM policy attached to a user.
resource "aws_iam_user_policy" "lb_ro" { name = "test" user = "${aws_iam_user.lb.name}" policy = <<EOF { "Version": "2012-10-17", "Statement": [ { "Action": [ "ec2:Describe*" ], "Effect": "Allow", "Resource": "*" } ] } EOF } resource "aws_iam_user" "lb" { name = "loadbalancer" path = "/system/" } resource "aws_iam_access_key" "lb" { user = "${aws_iam_user.lb.name}" }
The following arguments are supported:
policy
- (Required) The policy document. This is a JSON formatted string. The heredoc syntax or file
function is helpful here. name
- (Optional) The name of the policy. If omitted, Terraform will assign a random, unique name. name_prefix
- (Optional, Forces new resource) Creates a unique name beginning with the specified prefix. Conflicts with name
. user
- (Required) IAM user to which to attach this policy. id
- The user policy ID, in the form of user_name:user_policy_name
. name
- The name of the policy (always set). IAM User Policies can be imported using the user_name:user_policy_name
, e.g.
$ terraform import aws_iam_user_policy.mypolicy user_of_mypolicy_name:mypolicy_name
© 2018 HashiCorpLicensed under the MPL 2.0 License.
https://www.terraform.io/docs/providers/aws/r/iam_user_policy.html