46 lines
1.1 KiB
Terraform
46 lines
1.1 KiB
Terraform
resource "scaleway_object_bucket" "infra_assets" {
|
|
name = "a13labs-infra-${var.bucket_suffix}"
|
|
project_id = var.scaleway_project_id
|
|
region = "fr-par"
|
|
}
|
|
|
|
resource "scaleway_object_bucket_policy" "policy" {
|
|
bucket = scaleway_object_bucket.infra_assets.name
|
|
policy = jsonencode({
|
|
Version = "2023-04-17",
|
|
Id = "AllowMachineDownload",
|
|
Statement = [
|
|
{
|
|
Effect = "Allow"
|
|
Action = [
|
|
"s3:ListBucket",
|
|
"s3:GetObject",
|
|
]
|
|
Principal = "*"
|
|
Resource = [
|
|
scaleway_object_bucket.infra_assets.name,
|
|
"${scaleway_object_bucket.infra_assets.name}/*",
|
|
]
|
|
Condition = {
|
|
IpAddress = {
|
|
"aws:SourceIp" = local.instance_ips
|
|
}
|
|
},
|
|
},
|
|
{
|
|
Effect = "Allow"
|
|
Action = [
|
|
"s3:*",
|
|
]
|
|
Principal = {
|
|
SCW = "user_id:${var.scaleway_user_id}"
|
|
}
|
|
Resource = [
|
|
scaleway_object_bucket.infra_assets.name,
|
|
"${scaleway_object_bucket.infra_assets.name}/*",
|
|
]
|
|
},
|
|
]
|
|
})
|
|
}
|