We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 5cbbcda commit 8f30d72Copy full SHA for 8f30d72
tofu/modules/deployment/templates/state-policy.yaml.tftpl
@@ -0,0 +1,26 @@
1
+Version: "2012-10-17"
2
+Statement:
3
+ - Sid: InfraStateAccess
4
+ Effect: Allow
5
+ Action:
6
+ - s3:CreateBucket
7
+ - s3:ListBucket
8
+ - s3:GetBucketLocation
9
+ - s3:GetObject
10
+ - s3:PutObject
11
+ - s3:DeleteObject
12
+ Resource:
13
+ - arn:${partition}:s3:::${project}-${environment}-tfstate
14
+ - arn:${partition}:s3:::${project}-${environment}-tfstate/*
15
+ - Sid: InfraLockAccess
16
17
18
+ - dynamodb:CreateTable
19
+ - dynamodb:DescribeTable
20
+ - dynamodb:DeleteTable
21
+ - dynamodb:UpdateTable
22
+ - dynamodb:GetItem
23
+ - dynamodb:PutItem
24
+ - dynamodb:DeleteItem
25
26
+ - arn:${partition}:dynamodb:${region}:${account_id}:table/${environment}.tfstate
0 commit comments