17 lines
500 B
HCL
17 lines
500 B
HCL
# ---------------------------------------------------------------------------
|
|
# Amazon S3 datasources
|
|
# ---------------------------------------------------------------------------
|
|
|
|
data "aws_iam_policy_document" "this" {
|
|
statement {
|
|
sid = "PublicReadGetObject"
|
|
effect = "Allow"
|
|
actions = ["s3:GetObject"]
|
|
principals {
|
|
type = "AWS"
|
|
identifiers = [aws_cloudfront_origin_access_identity.this.iam_arn]
|
|
}
|
|
resources = ["${aws_s3_bucket.this.arn}/*"]
|
|
}
|
|
}
|