Skip to content

Commit 15286fd

Browse files
committed
SSO Assignment: Inline policy documentation
1 parent 6c2f771 commit 15286fd

File tree

1 file changed

+25
-0
lines changed

1 file changed

+25
-0
lines changed

modules/aws/sso_account_assignment/README.md

Lines changed: 25 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -67,3 +67,28 @@ module "iam_example" {
6767
}
6868
}
6969
```
70+
71+
You can also provide inline IAM policies:
72+
73+
```hcl
74+
data "aws_iam_policy_document" "example" {
75+
statement {
76+
actions = [
77+
"s3:ListAllMyBuckets",
78+
"s3:GetBucketLocation",
79+
]
80+
81+
resources = ["arn:aws:s3:::*"]
82+
}
83+
}
84+
85+
module "iam_example" {
86+
# ...
87+
88+
permission_sets = {
89+
S3BucketAccess = {
90+
inline_policy = data.aws_iam_policy_document.example.json
91+
}
92+
}
93+
}
94+
```

0 commit comments

Comments
 (0)