mirror/setup-ipsec-vpn
1
0
Fork 0
mirror of synced 2024-12-01 00:56:04 +03:00
Code Issues Projects Releases Wiki Activity

add new IAM s3 policy

Browse Source
This commit is contained in:
Scottpedia 2023-08-17 04:33:37 +08:00
parent f06bf60bbb
commit 6d449265c9
1 changed files with 56 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

59
aws/cloudformation-template-ipsec.json
View File

@ -9,7 +9,7 @@
"based on the work of Lin Song <linsongui@gmail.com> : https://github.com/hwdsl2/setup-ipsec-vpn",
"The latest version of this template can be found at : https://github.com/hwdsl2/setup-ipsec-vpn/aws",
"",
"Copyright (C) 2020-2023 Scott X. Liang <scottliang3@cmail.carleton.ca>",
"Copyright (C) 2020-2023 Scott X. L. <wtanglef@pm.me>",
"",
"This work is licensed under the Creative Commons Attribution-ShareAlike 3.0",
"Unported License: http://creativecommons.org/licenses/by-sa/3.0/",
@ -60,12 +60,12 @@
"Path": "/setup-ipsec-vpn/",
"Roles": [
{
"Ref": "LambdaExecutionRole"
"Ref": "S3ExecutionRole"
}
]
},
"DependsOn": [
"LambdaExecutionRole",
"S3ExecutionRole",
"KeyPairInfo"
]
},
@ -562,6 +562,59 @@
},
"Metadata": {}
},
"S3ExecutionRole": {
"Type": "AWS::IAM::Role",
"Properties": {
"AssumeRolePolicyDocument": {
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Principal": {
"Service": [
"s3.amazonaws.com"
]
},
"Action": [
"sts:AssumeRole"
]
}
]
},
"Path": "/",
"Policies": [
{
"PolicyName": "s3-bucket-specific-policy",
"PolicyDocument": {
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": "s3:UploadObject",
"Resource": [
{
"Fn::Join": [
"",
[
{
"Fn::GetAtt": [
"Ikev2S3Bucket",
"Arn"
]
},
"/*"
]
]
}
]
}
]
}
}
]
},
"Metadata": {}
},
"KeyPairInfo": {
"Type": "Custom::KeyPairInfo",
"Properties": {