Setup s3 access at ec2 level

This commit is contained in:
Ian Keane 2026-08-18 13:17:40 -04:00
parent 875e715ce9
commit 865831f1de
6 changed files with 47 additions and 58 deletions

View file

@ -60,31 +60,6 @@ resource "aws_athena_workgroup" "logs" {
}
}
# IAM user for fluent-bit to write to S3
resource "aws_iam_user" "fluentbit" {
name = "${var.cluster_name}-fluentbit"
}
resource "aws_iam_access_key" "fluentbit" {
user = aws_iam_user.fluentbit.name
}
resource "aws_iam_user_policy" "fluentbit" {
name = "fluentbit-s3-write"
user = aws_iam_user.fluentbit.name
policy = jsonencode({
Version = "2012-10-17"
Statement = [
{
Effect = "Allow"
Action = ["s3:PutObject"]
Resource = "${aws_s3_bucket.logs.arn}/*"
}
]
})
}
output "logs_bucket" {
value = aws_s3_bucket.logs.bucket
}