Skip to content

Instantly share code, notes, and snippets.

View cjbischoff's full-sized avatar

Christopher cjbischoff

View GitHub Profile
variable "bucket_name" {}
variable "name" {}
variable "s3logs_bucket_name" {}
variable "database_kms_key_arn" {}
variable "read_only_roles" {
type = "list"
# KMS.tf
resource "aws_kms_key" "kms_key" {
policy = <<POLICY
{
"Version": "2012-10-17",
"Id": "${var.name}-key",
"Statement": [
{
"Sid": "Enable IAM User Permissions",