21 lines
527 B
HCL
21 lines
527 B
HCL
data "aws_iam_policy_document" "assume" {
|
|
statement {
|
|
effect = "Allow"
|
|
principals {
|
|
type = "Service"
|
|
identifiers = ["lambda.amazonaws.com"]
|
|
}
|
|
actions = ["sts:AssumeRole"]
|
|
}
|
|
}
|
|
|
|
resource "aws_iam_role" "this" {
|
|
name = var.name
|
|
assume_role_policy = data.aws_iam_policy_document.assume.json
|
|
}
|
|
|
|
resource "aws_iam_role_policy_attachment" "basic_logs" {
|
|
role = aws_iam_role.this.name
|
|
policy_arn = "arn:aws:iam::aws:policy/service-role/AWSLambdaBasicExecutionRole"
|
|
}
|
|
|