Skip to content

Data only module that breaks down s3 iam permissions into "destructive_", "non_destructive_", ands building blocks of "write_" & "read_"

Notifications You must be signed in to change notification settings

jtzero/terraform-aws-s3-permissions

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

6 Commits
 
 
 
 
 
 
 
 

Repository files navigation

terraform-aws-s3-permissions

Data only module that breaks down s3 iam permissions into 6 groups as locals in main.tf

----------+----------------+---------------+
          | create/update  | read | delete |
----------+----------------+------+--------+
in-bucket |                |      |        |
----------+----------------+------+--------+
(on)bucket|                |      |        |
----------+----------------+------+--------+

Currently there is no distinction beteween create and update, if you can 
create it you can change it's attr's as well.

For outputs there are just 4 major combinations

------------+--------------------+-------------------+
output name | destructive_       | non_destructive_  |
------------+--------------------+-------------------+
in-bucket   | can read           | can read          |  read_ 
            | can create/update  | can create/update |  write_
            | can delete         | can't delete      |  
------------+--------------------+-------------------+
(on)bucket  | see above          | see above         |
------------+--------------------+-------------------+

About

Data only module that breaks down s3 iam permissions into "destructive_", "non_destructive_", ands building blocks of "write_" & "read_"

Topics

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages