diff --git a/terraform/iam.tf b/terraform/iam.tf index 18b89fe..4dac585 100644 --- a/terraform/iam.tf +++ b/terraform/iam.tf @@ -1,24 +1,24 @@ data "aws_s3_bucket" "storage_bucket" { - bucket = var.gitea_boot.bucket + bucket = var.boot_bucket } data "aws_iam_policy_document" "gitea_bool_policy" { statement { effect = "Allow" actions = ["s3:*", "s3-object-lambda:*"] - resources = ["${data.aws_s3_bucket.storage_bucket.arn}/${var.gitea_boot.key}"] + resources = ["${data.aws_s3_bucket.storage_bucket.arn}/${var.boot_key}"] } } resource "aws_iam_policy" "gitea_boot_policy" { - name = "${var.gitea_boot.role}Policy" + name = "${var.boot_role}Policy" description = "The policy that manages the Gitea Boot." policy = data.aws_iam_policy_document.gitea_bool_policy.json } resource "aws_iam_user" "gitea_boot_user" { - name = "${var.gitea_boot.role}User" + name = "${var.boot_role}User" } resource "aws_iam_user_policy_attachment" "attachment" { diff --git a/terraform/variables.tf b/terraform/variables.tf index 3804c73..6add0e5 100644 --- a/terraform/variables.tf +++ b/terraform/variables.tf @@ -3,11 +3,17 @@ variable "region" { description = "The AWS region things are created in." } -variable "gitea_boot" { - type = object({ - bucket = string - key = string - role = string - }) - description = "The storage for the Gitea instance." +variable "boot_bucket" { + type = string + description = "The name of the bucket to store the boot in." +} + +variable "boot_key" { + type = string + description = "The path that will hold the boot data." +} + +variable "boot_role" { + type = string + description = "The name of the role for boot access." } \ No newline at end of file