mirror of https://github.com/pulumi/pulumi.git
28 lines
653 B
Puppet
28 lines
653 B
Puppet
// Create a policy with multiple Condition keys
|
|
resource policy "aws:iam/policy:Policy" {
|
|
__logicalName = "policy"
|
|
path = "/"
|
|
description = "My test policy"
|
|
policy = toJSON({
|
|
"Version" = "2012-10-17",
|
|
"Statement" = [{
|
|
"Effect" = "Allow",
|
|
"Action" = "lambda:*",
|
|
"Resource" = "arn:aws:lambda:*:*:function:*",
|
|
"Condition" = {
|
|
"StringEquals" = {
|
|
"aws:RequestTag/Team" = [
|
|
"iamuser-admin",
|
|
"iamuser2-admin"
|
|
]
|
|
},
|
|
"ForAllValues:StringEquals" = {
|
|
"aws:TagKeys" = ["Team"]
|
|
}
|
|
}
|
|
}]
|
|
})
|
|
}
|
|
|
|
output policyName { value = policy.name }
|