mirror of
https://github.com/farcasclaudiu/terraform-course.git
synced 2026-06-28 19:02:07 +03:00
+19
-14
@@ -1,7 +1,7 @@
|
||||
# ecs ec2 role
|
||||
resource "aws_iam_role" "ecs-ec2-role" {
|
||||
name = "ecs-ec2-role"
|
||||
assume_role_policy = <<EOF
|
||||
name = "ecs-ec2-role"
|
||||
assume_role_policy = <<EOF
|
||||
{
|
||||
"Version": "2012-10-17",
|
||||
"Statement": [
|
||||
@@ -16,15 +16,17 @@ resource "aws_iam_role" "ecs-ec2-role" {
|
||||
]
|
||||
}
|
||||
EOF
|
||||
|
||||
}
|
||||
|
||||
resource "aws_iam_instance_profile" "ecs-ec2-role" {
|
||||
name = "ecs-ec2-role"
|
||||
role = "${aws_iam_role.ecs-ec2-role.name}"
|
||||
name = "ecs-ec2-role"
|
||||
role = aws_iam_role.ecs-ec2-role.name
|
||||
}
|
||||
|
||||
resource "aws_iam_role" "ecs-consul-server-role" {
|
||||
name = "ecs-consul-server-role"
|
||||
assume_role_policy = <<EOF
|
||||
name = "ecs-consul-server-role"
|
||||
assume_role_policy = <<EOF
|
||||
{
|
||||
"Version": "2012-10-17",
|
||||
"Statement": [
|
||||
@@ -39,12 +41,13 @@ resource "aws_iam_role" "ecs-consul-server-role" {
|
||||
]
|
||||
}
|
||||
EOF
|
||||
|
||||
}
|
||||
|
||||
resource "aws_iam_role_policy" "ecs-ec2-role-policy" {
|
||||
name = "ecs-ec2-role-policy"
|
||||
role = "${aws_iam_role.ecs-ec2-role.id}"
|
||||
policy = <<EOF
|
||||
name = "ecs-ec2-role-policy"
|
||||
role = aws_iam_role.ecs-ec2-role.id
|
||||
policy = <<EOF
|
||||
{
|
||||
"Version": "2012-10-17",
|
||||
"Statement": [
|
||||
@@ -83,12 +86,13 @@ resource "aws_iam_role_policy" "ecs-ec2-role-policy" {
|
||||
]
|
||||
}
|
||||
EOF
|
||||
|
||||
}
|
||||
|
||||
# ecs service role
|
||||
resource "aws_iam_role" "ecs-service-role" {
|
||||
name = "ecs-service-role"
|
||||
assume_role_policy = <<EOF
|
||||
name = "ecs-service-role"
|
||||
assume_role_policy = <<EOF
|
||||
{
|
||||
"Version": "2012-10-17",
|
||||
"Statement": [
|
||||
@@ -103,11 +107,12 @@ resource "aws_iam_role" "ecs-service-role" {
|
||||
]
|
||||
}
|
||||
EOF
|
||||
|
||||
}
|
||||
|
||||
resource "aws_iam_policy_attachment" "ecs-service-attach1" {
|
||||
name = "ecs-service-attach1"
|
||||
roles = ["${aws_iam_role.ecs-service-role.name}"]
|
||||
policy_arn = "arn:aws:iam::aws:policy/service-role/AmazonEC2ContainerServiceRole"
|
||||
name = "ecs-service-attach1"
|
||||
roles = [aws_iam_role.ecs-service-role.name]
|
||||
policy_arn = "arn:aws:iam::aws:policy/service-role/AmazonEC2ContainerServiceRole"
|
||||
}
|
||||
|
||||
|
||||
Reference in New Issue
Block a user