From 203843c387adafbba7eb3e1f47627343e296958d Mon Sep 17 00:00:00 2001
From: Jun-te Kim <junte.kim@mealcraft.com>
Date: Wed, 11 Feb 2026 13:16:11 +0000
Subject: [PATCH] added new files

---
 .../terraform/lambda/address2UPRN/outputs.tf  | 14 ++++++++
 .../modules/general_iam_policy/main.tf        | 21 ++++++++++++
 .../modules/general_iam_policy/outputs.tf     |  9 ++++++
 .../modules/general_iam_policy/variables.tf   | 32 +++++++++++++++++++
 4 files changed, 76 insertions(+)
 create mode 100644 infrastructure/terraform/lambda/address2UPRN/outputs.tf
 create mode 100644 infrastructure/terraform/modules/general_iam_policy/main.tf
 create mode 100644 infrastructure/terraform/modules/general_iam_policy/outputs.tf
 create mode 100644 infrastructure/terraform/modules/general_iam_policy/variables.tf

diff --git a/infrastructure/terraform/lambda/address2UPRN/outputs.tf b/infrastructure/terraform/lambda/address2UPRN/outputs.tf
new file mode 100644
index 00000000..e4645a0a
--- /dev/null
+++ b/infrastructure/terraform/lambda/address2UPRN/outputs.tf
@@ -0,0 +1,14 @@
+output "address2uprn_queue_url" {
+  value       = module.address2uprn.queue_url
+  description = "URL of the address2UPRN SQS queue"
+}
+
+output "address2uprn_queue_arn" {
+  value       = module.address2uprn.queue_arn
+  description = "ARN of the address2UPRN SQS queue"
+}
+
+output "address2uprn_lambda_arn" {
+  value       = module.address2uprn.lambda_arn
+  description = "ARN of the address2UPRN Lambda function"
+}
diff --git a/infrastructure/terraform/modules/general_iam_policy/main.tf b/infrastructure/terraform/modules/general_iam_policy/main.tf
new file mode 100644
index 00000000..f7ffe4a1
--- /dev/null
+++ b/infrastructure/terraform/modules/general_iam_policy/main.tf
@@ -0,0 +1,21 @@
+# IAM Policy with dynamic actions and resources
+resource "aws_iam_policy" "policy" {
+  name        = var.policy_name
+  description = var.policy_description
+
+  policy = jsonencode({
+    Version = "2012-10-17"
+    Statement = [
+      merge(
+        {
+          Effect   = "Allow"
+          Action   = var.actions
+          Resource = var.resources
+        },
+        var.conditions != null ? { Condition = var.conditions } : {}
+      )
+    ]
+  })
+
+  tags = var.tags
+}
diff --git a/infrastructure/terraform/modules/general_iam_policy/outputs.tf b/infrastructure/terraform/modules/general_iam_policy/outputs.tf
new file mode 100644
index 00000000..cfceab05
--- /dev/null
+++ b/infrastructure/terraform/modules/general_iam_policy/outputs.tf
@@ -0,0 +1,9 @@
+output "policy_arn" {
+  value       = aws_iam_policy.policy.arn
+  description = "ARN of the created IAM policy"
+}
+
+output "policy_name" {
+  value       = aws_iam_policy.policy.name
+  description = "Name of the created IAM policy"
+}
diff --git a/infrastructure/terraform/modules/general_iam_policy/variables.tf b/infrastructure/terraform/modules/general_iam_policy/variables.tf
new file mode 100644
index 00000000..0d824eb5
--- /dev/null
+++ b/infrastructure/terraform/modules/general_iam_policy/variables.tf
@@ -0,0 +1,32 @@
+variable "policy_name" {
+  description = "Name of the IAM policy"
+  type        = string
+}
+
+variable "policy_description" {
+  description = "Description of the IAM policy"
+  type        = string
+  default     = ""
+}
+
+variable "actions" {
+  description = "List of IAM actions allowed by this policy"
+  type        = list(string)
+}
+
+variable "resources" {
+  description = "List of AWS resources this policy applies to"
+  type        = list(string)
+}
+
+variable "conditions" {
+  description = "Optional IAM policy conditions"
+  type        = any
+  default     = null
+}
+
+variable "tags" {
+  description = "Tags to apply to the policy"
+  type        = map(string)
+  default     = {}
+}