aws_iam_policy

Provides an IAM policy.

resource "aws_iam_policy" "policy" {
    name = "test_policy"
    path = "/"
    description = "My test policy"
    policy = <<EOF
{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Action": [
        "ec2:Describe*"
      ],
      "Effect": "Allow",
      "Resource": "*"
    }
  ]
}
EOF
}

Argument Reference

The following arguments are supported:

• description - (Optional) Description of the IAM policy.
• path - (Optional, default “/”) Path in which to create the policy.
• policy - (Required) The policy document. This is a JSON formatted string. The heredoc syntax, file function, or the aws_iam_policy_document data source are all helpful here.
• name (Required) - The name of the policy.

Attributes Reference

The following attributes are exported:

• id - The policy’s ID.
• arn - The ARN assigned by AWS to this policy.
• description - The description of the policy.
• name - The name of the policy.
• path - The path of the policy in IAM.
• policy - The policy document.

See the source of this document at Terraform.io