Setup s3 access at ec2 level
This commit is contained in:
parent
875e715ce9
commit
865831f1de
6 changed files with 47 additions and 58 deletions
|
|
@ -60,31 +60,6 @@ resource "aws_athena_workgroup" "logs" {
|
|||
}
|
||||
}
|
||||
|
||||
# IAM user for fluent-bit to write to S3
|
||||
resource "aws_iam_user" "fluentbit" {
|
||||
name = "${var.cluster_name}-fluentbit"
|
||||
}
|
||||
|
||||
resource "aws_iam_access_key" "fluentbit" {
|
||||
user = aws_iam_user.fluentbit.name
|
||||
}
|
||||
|
||||
resource "aws_iam_user_policy" "fluentbit" {
|
||||
name = "fluentbit-s3-write"
|
||||
user = aws_iam_user.fluentbit.name
|
||||
|
||||
policy = jsonencode({
|
||||
Version = "2012-10-17"
|
||||
Statement = [
|
||||
{
|
||||
Effect = "Allow"
|
||||
Action = ["s3:PutObject"]
|
||||
Resource = "${aws_s3_bucket.logs.arn}/*"
|
||||
}
|
||||
]
|
||||
})
|
||||
}
|
||||
|
||||
output "logs_bucket" {
|
||||
value = aws_s3_bucket.logs.bucket
|
||||
}
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue