1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25

# Managed policies ===========================================================

resource "aws_iam_policy" "this" {
  for_each = var.policies

  name        = each.value.name
  description = each.value.description
  path        = each.value.path
  policy      = each.value.policy

  tags = local.tags
}

# Permission boundary policies -----------------------------------------------

resource "aws_iam_policy" "boundary" {
  for_each = var.permission_boundaries

  name        = each.value.name
  description = each.value.description
  path        = each.value.path
  policy      = each.value.policy

  tags = merge(local.tags, { Purpose = "PermissionBoundary" })
}