terraform-s3-bucket-list-condition-policies

provider "aws" {
        region = "eu-central-1"
}


variable "input-buckets" {
        default = [
                "bucket1",
                "bucket2"
        ]
}

variable "input-read" { default = false }

resource "aws_iam_policy" "read-only" {
 count  = "${var.input-read? length(var.input-buckets) : 0}"
  name        = "read-only-policy"
  path        = "/"
  description = "My test policy"

  policy = <<EOF
{
  "Version":"2012-10-17",
  "Statement":[
    {
      "Sid":"AddPerm",
      "Effect":"Allow",
      "Principal": "*",
      "Action":[
                "s3:GetObject",
                "s3:List*"
        ],
      "Resource":["arn:aws:s3:::${element(var.input-buckets, count.index)}/*"]
    }
  ]
}
EOF
}

variable "output-write" { default = true }

variable "output-buckets" {
        default = [
                "bucket1",
                "bucket2"
        ]
}

resource "aws_iam_policy" "write-list" {
  count = "${var.output-write? length(var.output-buckets) : 0}"
  name        = "write-policy"
  path        = "/"
  description = "My test policy"

  policy = <<EOF
{
  "Version":"2012-10-17",
  "Statement":[
    {
      "Sid":"AddPerm",
      "Effect":"Allow",
      "Principal": "*",
      "Action":[
                "s3:List*",
                "s3:PutObject"
        ],
      "Resource":["arn:aws:s3:::${element(var.output-buckets, count.index)}/*"]
    }
  ]
}
EOF
}