add storage

Author: hobu

terraform/main.tf

@@ -47,3 +47,8 @@ output "info_lambda_name" {
     description = "Lambda Name"
     value = module.resources.info_lambda_name
 }
+
+output "bucket" {
+    description = "Storage bucket"
+    value = module.resources.bucket
+}

terraform/resources/roles.tf

@@ -31,9 +31,14 @@ data "aws_iam_policy_document" "iam_for_lambda_policy_document" {
   statement {
     actions = [
         "s3:GetObject",
+        "s3:GetBucketTagging",
+        "s3:PutObjectTagging",
+        "s3:PutObject",
+        "s3:ListBucket",
+        "s3:DeleteObject",
     ]
     effect    = "Allow"
-    resources = ["*"]
+    resources = [aws_s3_bucket.storage.arn]
     sid       = "ReadS3"
   }
 

terraform/resources/var.tf

@@ -33,3 +33,4 @@ output "prefix" {
 }
 
 
+