280 lines
14 KiB
JSON
280 lines
14 KiB
JSON
{
|
|
"version": 4,
|
|
"terraform_version": "0.12.9",
|
|
"serial": 9,
|
|
"lineage": "07ea4679-dcfc-ec03-69c0-9f3b3df53386",
|
|
"outputs": {},
|
|
"resources": [
|
|
{
|
|
"module": "module.prod_env",
|
|
"mode": "data",
|
|
"type": "aws_iam_policy_document",
|
|
"name": "bucket_access_policy",
|
|
"provider": "provider.aws",
|
|
"instances": [
|
|
{
|
|
"schema_version": 0,
|
|
"attributes": {
|
|
"id": "1727217411",
|
|
"json": "{\n \"Version\": \"2012-10-17\",\n \"Statement\": [\n {\n \"Sid\": \"\",\n \"Effect\": \"Allow\",\n \"Action\": \"s3:GetObject\",\n \"Resource\": \"arn:aws:s3:::pm.jdb-labs.com/prod/webroot/*\",\n \"Principal\": {\n \"AWS\": \"arn:aws:iam::cloudfront:user/CloudFront_Origin_Access_Identity_EV7VQF8SH3HMM\"\n }\n },\n {\n \"Sid\": \"\",\n \"Effect\": \"Allow\",\n \"Action\": \"s3:ListBucket\",\n \"Resource\": \"arn:aws:s3:::pm.jdb-labs.com\",\n \"Principal\": {\n \"AWS\": \"arn:aws:iam::cloudfront:user/CloudFront_Origin_Access_Identity_EV7VQF8SH3HMM\"\n }\n }\n ]\n}",
|
|
"override_json": null,
|
|
"policy_id": null,
|
|
"source_json": null,
|
|
"statement": [
|
|
{
|
|
"actions": [
|
|
"s3:GetObject"
|
|
],
|
|
"condition": [],
|
|
"effect": "Allow",
|
|
"not_actions": [],
|
|
"not_principals": [],
|
|
"not_resources": [],
|
|
"principals": [
|
|
{
|
|
"identifiers": [
|
|
"arn:aws:iam::cloudfront:user/CloudFront_Origin_Access_Identity_EV7VQF8SH3HMM"
|
|
],
|
|
"type": "AWS"
|
|
}
|
|
],
|
|
"resources": [
|
|
"arn:aws:s3:::pm.jdb-labs.com/prod/webroot/*"
|
|
],
|
|
"sid": ""
|
|
},
|
|
{
|
|
"actions": [
|
|
"s3:ListBucket"
|
|
],
|
|
"condition": [],
|
|
"effect": "Allow",
|
|
"not_actions": [],
|
|
"not_principals": [],
|
|
"not_resources": [],
|
|
"principals": [
|
|
{
|
|
"identifiers": [
|
|
"arn:aws:iam::cloudfront:user/CloudFront_Origin_Access_Identity_EV7VQF8SH3HMM"
|
|
],
|
|
"type": "AWS"
|
|
}
|
|
],
|
|
"resources": [
|
|
"arn:aws:s3:::pm.jdb-labs.com"
|
|
],
|
|
"sid": ""
|
|
}
|
|
],
|
|
"version": "2012-10-17"
|
|
},
|
|
"depends_on": [
|
|
"aws_cloudfront_origin_access_identity.origin_access_identity"
|
|
]
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"module": "module.dev_env",
|
|
"mode": "data",
|
|
"type": "aws_iam_policy_document",
|
|
"name": "bucket_access_policy",
|
|
"provider": "provider.aws",
|
|
"instances": [
|
|
{
|
|
"schema_version": 0,
|
|
"attributes": {
|
|
"id": "3067586518",
|
|
"json": "{\n \"Version\": \"2012-10-17\",\n \"Statement\": [\n {\n \"Sid\": \"\",\n \"Effect\": \"Allow\",\n \"Action\": \"s3:GetObject\",\n \"Resource\": \"arn:aws:s3:::pm.jdb-labs.com/dev/webroot/*\",\n \"Principal\": {\n \"AWS\": \"arn:aws:iam::cloudfront:user/CloudFront_Origin_Access_Identity_ENADNQSO0I1JY\"\n }\n },\n {\n \"Sid\": \"\",\n \"Effect\": \"Allow\",\n \"Action\": \"s3:ListBucket\",\n \"Resource\": \"arn:aws:s3:::pm.jdb-labs.com\",\n \"Principal\": {\n \"AWS\": \"arn:aws:iam::cloudfront:user/CloudFront_Origin_Access_Identity_ENADNQSO0I1JY\"\n }\n }\n ]\n}",
|
|
"override_json": null,
|
|
"policy_id": null,
|
|
"source_json": null,
|
|
"statement": [
|
|
{
|
|
"actions": [
|
|
"s3:GetObject"
|
|
],
|
|
"condition": [],
|
|
"effect": "Allow",
|
|
"not_actions": [],
|
|
"not_principals": [],
|
|
"not_resources": [],
|
|
"principals": [
|
|
{
|
|
"identifiers": [
|
|
"arn:aws:iam::cloudfront:user/CloudFront_Origin_Access_Identity_ENADNQSO0I1JY"
|
|
],
|
|
"type": "AWS"
|
|
}
|
|
],
|
|
"resources": [
|
|
"arn:aws:s3:::pm.jdb-labs.com/dev/webroot/*"
|
|
],
|
|
"sid": ""
|
|
},
|
|
{
|
|
"actions": [
|
|
"s3:ListBucket"
|
|
],
|
|
"condition": [],
|
|
"effect": "Allow",
|
|
"not_actions": [],
|
|
"not_principals": [],
|
|
"not_resources": [],
|
|
"principals": [
|
|
{
|
|
"identifiers": [
|
|
"arn:aws:iam::cloudfront:user/CloudFront_Origin_Access_Identity_ENADNQSO0I1JY"
|
|
],
|
|
"type": "AWS"
|
|
}
|
|
],
|
|
"resources": [
|
|
"arn:aws:s3:::pm.jdb-labs.com"
|
|
],
|
|
"sid": ""
|
|
}
|
|
],
|
|
"version": "2012-10-17"
|
|
},
|
|
"depends_on": [
|
|
"aws_cloudfront_origin_access_identity.origin_access_identity"
|
|
]
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"mode": "data",
|
|
"type": "aws_iam_policy_document",
|
|
"name": "cloudfront_access_policy",
|
|
"provider": "provider.aws",
|
|
"instances": [
|
|
{
|
|
"schema_version": 0,
|
|
"attributes": {
|
|
"id": "754132408",
|
|
"json": "{\n \"Version\": \"2012-10-17\",\n \"Statement\": [\n {\n \"Sid\": \"\",\n \"Effect\": \"Allow\",\n \"Action\": \"s3:GetObject\",\n \"Resource\": \"arn:aws:s3:::pm.jdb-labs.com/dev/webroot/*\",\n \"Principal\": {\n \"AWS\": \"arn:aws:iam::cloudfront:user/CloudFront_Origin_Access_Identity_ENADNQSO0I1JY\"\n }\n },\n {\n \"Sid\": \"\",\n \"Effect\": \"Allow\",\n \"Action\": \"s3:ListBucket\",\n \"Resource\": \"arn:aws:s3:::pm.jdb-labs.com\",\n \"Principal\": {\n \"AWS\": \"arn:aws:iam::cloudfront:user/CloudFront_Origin_Access_Identity_ENADNQSO0I1JY\"\n }\n },\n {\n \"Sid\": \"\",\n \"Effect\": \"Allow\",\n \"Action\": \"s3:GetObject\",\n \"Resource\": \"arn:aws:s3:::pm.jdb-labs.com/prod/webroot/*\",\n \"Principal\": {\n \"AWS\": \"arn:aws:iam::cloudfront:user/CloudFront_Origin_Access_Identity_EV7VQF8SH3HMM\"\n }\n },\n {\n \"Sid\": \"\",\n \"Effect\": \"Allow\",\n \"Action\": \"s3:ListBucket\",\n \"Resource\": \"arn:aws:s3:::pm.jdb-labs.com\",\n \"Principal\": {\n \"AWS\": \"arn:aws:iam::cloudfront:user/CloudFront_Origin_Access_Identity_EV7VQF8SH3HMM\"\n }\n }\n ]\n}",
|
|
"override_json": "{\n \"Version\": \"2012-10-17\",\n \"Statement\": [\n {\n \"Sid\": \"\",\n \"Effect\": \"Allow\",\n \"Action\": \"s3:GetObject\",\n \"Resource\": \"arn:aws:s3:::pm.jdb-labs.com/prod/webroot/*\",\n \"Principal\": {\n \"AWS\": \"arn:aws:iam::cloudfront:user/CloudFront_Origin_Access_Identity_EV7VQF8SH3HMM\"\n }\n },\n {\n \"Sid\": \"\",\n \"Effect\": \"Allow\",\n \"Action\": \"s3:ListBucket\",\n \"Resource\": \"arn:aws:s3:::pm.jdb-labs.com\",\n \"Principal\": {\n \"AWS\": \"arn:aws:iam::cloudfront:user/CloudFront_Origin_Access_Identity_EV7VQF8SH3HMM\"\n }\n }\n ]\n}",
|
|
"policy_id": null,
|
|
"source_json": "{\n \"Version\": \"2012-10-17\",\n \"Statement\": [\n {\n \"Sid\": \"\",\n \"Effect\": \"Allow\",\n \"Action\": \"s3:GetObject\",\n \"Resource\": \"arn:aws:s3:::pm.jdb-labs.com/dev/webroot/*\",\n \"Principal\": {\n \"AWS\": \"arn:aws:iam::cloudfront:user/CloudFront_Origin_Access_Identity_ENADNQSO0I1JY\"\n }\n },\n {\n \"Sid\": \"\",\n \"Effect\": \"Allow\",\n \"Action\": \"s3:ListBucket\",\n \"Resource\": \"arn:aws:s3:::pm.jdb-labs.com\",\n \"Principal\": {\n \"AWS\": \"arn:aws:iam::cloudfront:user/CloudFront_Origin_Access_Identity_ENADNQSO0I1JY\"\n }\n }\n ]\n}",
|
|
"statement": null,
|
|
"version": "2012-10-17"
|
|
},
|
|
"depends_on": [
|
|
"module.dev_env",
|
|
"module.prod_env"
|
|
]
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"module": "module.prod_env",
|
|
"mode": "managed",
|
|
"type": "aws_cloudfront_origin_access_identity",
|
|
"name": "origin_access_identity",
|
|
"provider": "provider.aws",
|
|
"instances": [
|
|
{
|
|
"schema_version": 0,
|
|
"attributes": {
|
|
"caller_reference": "terraform-20190924170615555500000002",
|
|
"cloudfront_access_identity_path": "origin-access-identity/cloudfront/EV7VQF8SH3HMM",
|
|
"comment": "OAI for Personal Measure {$var.environment} environment.",
|
|
"etag": "E1XJOGSBHHRD9K",
|
|
"iam_arn": "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity EV7VQF8SH3HMM",
|
|
"id": "EV7VQF8SH3HMM",
|
|
"s3_canonical_user_id": "3a882d18f05e2fa5a3cabc208bcb8c0e2143166b56c0b8442f5b8b405c203859a3f525afcabc2e52dd1c9799d883a166"
|
|
},
|
|
"private": "bnVsbA=="
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"module": "module.dev_env",
|
|
"mode": "managed",
|
|
"type": "aws_cloudfront_origin_access_identity",
|
|
"name": "origin_access_identity",
|
|
"provider": "provider.aws",
|
|
"instances": [
|
|
{
|
|
"schema_version": 0,
|
|
"attributes": {
|
|
"caller_reference": "terraform-20190924170615555100000001",
|
|
"cloudfront_access_identity_path": "origin-access-identity/cloudfront/ENADNQSO0I1JY",
|
|
"comment": "OAI for Personal Measure {$var.environment} environment.",
|
|
"etag": "E1K0T63S2F5CYR",
|
|
"iam_arn": "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity ENADNQSO0I1JY",
|
|
"id": "ENADNQSO0I1JY",
|
|
"s3_canonical_user_id": "6e965a9a0e9034badac65e1ac223e048b6d1b934d146abd32c49634489959a5ee1252e34fb643cd222dde425f2abfcd4"
|
|
},
|
|
"private": "bnVsbA=="
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"mode": "managed",
|
|
"type": "aws_s3_bucket",
|
|
"name": "personal_measure",
|
|
"provider": "provider.aws",
|
|
"instances": [
|
|
{
|
|
"schema_version": 0,
|
|
"attributes": {
|
|
"acceleration_status": "",
|
|
"acl": "log-delivery-write",
|
|
"arn": "arn:aws:s3:::pm.jdb-labs.com",
|
|
"bucket": "pm.jdb-labs.com",
|
|
"bucket_domain_name": "pm.jdb-labs.com.s3.amazonaws.com",
|
|
"bucket_prefix": null,
|
|
"bucket_regional_domain_name": "pm.jdb-labs.com.s3.us-west-2.amazonaws.com",
|
|
"cors_rule": [],
|
|
"force_destroy": false,
|
|
"hosted_zone_id": "Z3BJ6K6RIION7M",
|
|
"id": "pm.jdb-labs.com",
|
|
"lifecycle_rule": [],
|
|
"logging": [],
|
|
"object_lock_configuration": [],
|
|
"policy": null,
|
|
"region": "us-west-2",
|
|
"replication_configuration": [],
|
|
"request_payer": "BucketOwner",
|
|
"server_side_encryption_configuration": [],
|
|
"tags": {},
|
|
"versioning": [
|
|
{
|
|
"enabled": false,
|
|
"mfa_delete": false
|
|
}
|
|
],
|
|
"website": [],
|
|
"website_domain": null,
|
|
"website_endpoint": null
|
|
},
|
|
"private": "bnVsbA=="
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"mode": "managed",
|
|
"type": "aws_s3_bucket_policy",
|
|
"name": "personal_measure",
|
|
"provider": "provider.aws",
|
|
"instances": [
|
|
{
|
|
"schema_version": 0,
|
|
"attributes": {
|
|
"bucket": "pm.jdb-labs.com",
|
|
"id": "pm.jdb-labs.com",
|
|
"policy": "{\n \"Version\": \"2012-10-17\",\n \"Statement\": [\n {\n \"Sid\": \"\",\n \"Effect\": \"Allow\",\n \"Action\": \"s3:GetObject\",\n \"Resource\": \"arn:aws:s3:::pm.jdb-labs.com/dev/webroot/*\",\n \"Principal\": {\n \"AWS\": \"arn:aws:iam::cloudfront:user/CloudFront_Origin_Access_Identity_ENADNQSO0I1JY\"\n }\n },\n {\n \"Sid\": \"\",\n \"Effect\": \"Allow\",\n \"Action\": \"s3:ListBucket\",\n \"Resource\": \"arn:aws:s3:::pm.jdb-labs.com\",\n \"Principal\": {\n \"AWS\": \"arn:aws:iam::cloudfront:user/CloudFront_Origin_Access_Identity_ENADNQSO0I1JY\"\n }\n },\n {\n \"Sid\": \"\",\n \"Effect\": \"Allow\",\n \"Action\": \"s3:GetObject\",\n \"Resource\": \"arn:aws:s3:::pm.jdb-labs.com/prod/webroot/*\",\n \"Principal\": {\n \"AWS\": \"arn:aws:iam::cloudfront:user/CloudFront_Origin_Access_Identity_EV7VQF8SH3HMM\"\n }\n },\n {\n \"Sid\": \"\",\n \"Effect\": \"Allow\",\n \"Action\": \"s3:ListBucket\",\n \"Resource\": \"arn:aws:s3:::pm.jdb-labs.com\",\n \"Principal\": {\n \"AWS\": \"arn:aws:iam::cloudfront:user/CloudFront_Origin_Access_Identity_EV7VQF8SH3HMM\"\n }\n }\n ]\n}"
|
|
},
|
|
"private": "bnVsbA==",
|
|
"depends_on": [
|
|
"aws_s3_bucket.personal_measure",
|
|
"data.aws_iam_policy_document.cloudfront_access_policy"
|
|
]
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|