55 lines
1.1 KiB
Terraform
55 lines
1.1 KiB
Terraform
|
provider "aws" {
|
||
|
|
alias = "prod"
|
||
|
|
|
||
|
|
region = "us-east-1"
|
||
|
|
access_key = "${var.prod_access_key}"
|
||
|
|
secret_key = "${var.prod_secret_key}"
|
||
|
|
}
|
||
|
|
|
||
|
|
resource "aws_s3_bucket" "prod" {
|
||
|
|
provider = "aws.prod"
|
||
|
|
|
||
|
|
bucket = "${var.bucket_name}"
|
||
|
|
acl = "private"
|
||
|
|
policy = <<POLICY
|
||
|
|
{
|
||
|
|
"Version": "2008-10-17",
|
||
|
|
"Statement": [
|
||
|
|
{
|
||
|
|
"Sid": "AllowTest",
|
||
|
|
"Effect": "Allow",
|
||
|
|
"Principal": {
|
||
|
|
"AWS": "arn:aws:iam::${var.test_account_id}:root"
|
||
|
|
},
|
||
|
|
"Action": "s3:*",
|
||
|
|
"Resource": "arn:aws:s3:::${var.bucket_name}/*"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|
||
|
|
POLICY
|
||
|
|
}
|
||
|
|
|
||
|
|
resource "aws_s3_bucket_object" "prod" {
|
||
|
|
provider = "aws.prod"
|
||
|
|
|
||
|
|
bucket = "${aws_s3_bucket.prod.id}"
|
||
|
|
key = "object-uploaded-via-prod-creds"
|
||
|
|
source = "${path.module}/prod.txt"
|
||
|
|
}
|
||
|
|
|
||
|
|
provider "aws" {
|
||
|
|
alias = "test"
|
||
|
|
|
||
|
|
region = "us-east-1"
|
||
|
|
access_key = "${var.test_access_key}"
|
||
|
|
secret_key = "${var.test_secret_key}"
|
||
|
|
}
|
||
|
|
|
||
|
|
resource "aws_s3_bucket_object" "test" {
|
||
|
|
provider = "aws.test"
|
||
|
|
|
||
|
|
bucket = "${aws_s3_bucket.prod.id}"
|
||
|
|
key = "object-uploaded-via-test-creds"
|
||
|
|
source = "${path.module}/test.txt"
|
||
|
|
}
|