-
Notifications
You must be signed in to change notification settings - Fork 0
/
main.tf
92 lines (83 loc) · 2.71 KB
/
main.tf
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
locals {
bucket_names = [
"sales-data-bucket-1326-2024",
"marketing-data-bucket-1226-2024",
"engineering-data-bucket-1326-2024",
"operations-data-bucket-1326-2024",
"finance-data-bucket-1326-2024"
]
user_names = [
"alice",
"bob",
"charlie",
"backup"
]
}
resource "wasabi_bucket" "buckets" {
for_each = toset(local.bucket_names)
bucket = each.key
}
resource "wasabi_user" "users" {
for_each = toset(local.user_names)
name = each.key
}
module "set_engineering_policy" {
source = "./modules/bucket_policy"
bukcet_id = wasabi_bucket.buckets["engineering-data-bucket-1326-2024"].id
bucket_arn = wasabi_bucket.buckets["engineering-data-bucket-1326-2024"].arn
ro_users = [
"${wasabi_user.users["alice"].arn}",
"${wasabi_user.users["backup"].arn}",
]
rw_users = [
"${wasabi_user.users["bob"].arn}",
]
}
module "set_sales_policy" {
source = "./modules/bucket_policy"
bucket_arn = wasabi_bucket.buckets["sales-data-bucket-1326-2024"].arn
bukcet_id = wasabi_bucket.buckets["sales-data-bucket-1326-2024"].id
ro_users = [
"${wasabi_user.users["backup"].arn}",
]
rw_users = [
"${wasabi_user.users["alice"].arn}",
"${wasabi_user.users["bob"].arn}",
]
}
module "set_marketing_policy" {
source = "./modules/bucket_policy"
bucket_arn = wasabi_bucket.buckets["marketing-data-bucket-1226-2024"].arn
bukcet_id = wasabi_bucket.buckets["marketing-data-bucket-1226-2024"].id
ro_users = [
"${wasabi_user.users["backup"].arn}",
]
rw_users = [
"${wasabi_user.users["alice"].arn}",
"${wasabi_user.users["bob"].arn}",
]
}
module "set_operations_policy" {
source = "./modules/bucket_policy"
bucket_arn = wasabi_bucket.buckets["operations-data-bucket-1326-2024"].arn
bukcet_id = wasabi_bucket.buckets["operations-data-bucket-1326-2024"].id
ro_users = [
"${wasabi_user.users["backup"].arn}",
]
rw_users = [
"${wasabi_user.users["charlie"].arn}",
"${wasabi_user.users["bob"].arn}",
]
}
module "set_finance_policy" {
source = "./modules/bucket_policy"
bucket_arn = wasabi_bucket.buckets["finance-data-bucket-1326-2024"].arn
bukcet_id = wasabi_bucket.buckets["finance-data-bucket-1326-2024"].id
ro_users = [
"${wasabi_user.users["charlie"].arn}",
"${wasabi_user.users["backup"].arn}",
]
rw_users = [
"${wasabi_user.users["bob"].arn}",
]
}