junte/Model
1
0
Fork 0
mirror of https://github.com/Hestia-Homes/Model.git synced 2026-06-08 11:17:27 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

fast api s3 policy

Browse source
This commit is contained in:
Daniel Roth 2026-03-10 13:55:45 +00:00
parent 9c33a19656
commit 891ccd4a8b
2 changed files with 28 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
infrastructure/terraform/lambda/fast-api/main.tf
View file

@ -122,10 +122,10 @@ module "fastapi" {
############################################
resource "aws_iam_role_policy_attachment" "fastapi_s3_read" {
role = module.fastapi.role_name
policy_arn = data.terraform_remote_state.shared.outputs.fastapi_s3_read_arn
policy_arn = data.terraform_remote_state.shared.outputs.fast_api_s3_read_arn
}
resource "aws_iam_role_policy_attachment" "fastapi_sqs_send" {
role = module.fastapi.role_name
policy_arn = data.terraform_remote_state.shared.outputs.fastapi_sqs_send_arn
policy_arn = data.terraform_remote_state.shared.outputs.fast_api_sqs_send_arn
}

26
infrastructure/terraform/shared/main.tf
View file

@ -535,3 +535,29 @@ module "ara_fastapi_registry" {
name = "ara-fastapi"
stage = var.stage
}
# S3 policy for FastAPI app to read and write from various S3 buckets
module "fast_api_s3_read_and_write" {
source = "../modules/s3_iam_policy"
policy_name = "FastAPIReadandWriteS3"
policy_description = "Allow FastAPI Lambda to read from and write to various S3 buckets"
bucket_arns = [
"arn:aws:s3:::${module.s3_presignable_bucket.bucket_name}",
"arn:aws:s3:::${module.retrofit_sap_data.bucket_name}",
"arn:aws:s3:::${module.retrofit_sap_predictions.bucket_name}",
"arn:aws:s3:::${module.retrofit_carbon_predictions.bucket_name}",
"arn:aws:s3:::${module.retrofit_heat_predictions.bucket_name}",
"arn:aws:s3:::${module.retrofit_heating_kwh_predictions.bucket_name}",
"arn:aws:s3:::${module.retrofit_hotwater_kwh_predictions.bucket_name}",
"arn:aws:s3:::${module.retrofit_energy_assessments.bucket_name}"
]
actions = ["s3:GetObject", "s3:ListBucket"]
resource_paths = ["/*"]
}
output "fast_api_s3_read_and_write_arn" {
value = module.fast_api_s3_read_and_write.policy_arn
}