Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support for additional policy for creating reserial copies of S3 buckets #89

Merged
merged 6 commits into from
Aug 30, 2024
Merged

Support for additional policy for creating reserial copies of S3 buckets #89

Changes from all commits
Commits
Show all changes
6 commits
Select commit Hold shift + click to select a range
04e7bbf
added support `AWSBackupServiceRolePolicyForS3Backup` for backup serv…
Aug 15, 2024
d6390be
fixed typo
Aug 15, 2024
6c5307e
fixed path to the predefined policy
Aug 15, 2024
850053b
small correction the naming variable
Aug 15, 2024
4ec831e
fixed typos
Aug 15, 2024
fb6b740
Merge branch 'main' into feature/s3-buckets-support
gberenice Aug 30, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
23 changes: 12 additions & 11 deletions main.tf
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,13 +1,14 @@
locals {
enabled = module.this.enabled
plan_enabled = local.enabled && var.plan_enabled
iam_role_enabled = local.enabled && var.iam_role_enabled
iam_role_name = local.enabled ? coalesce(var.iam_role_name, module.label_backup_role.id) : null
iam_role_arn = join("", var.iam_role_enabled ? aws_iam_role.default[*].arn : data.aws_iam_role.existing[*].arn)
vault_enabled = local.enabled && var.vault_enabled
vault_name = local.enabled ? coalesce(var.vault_name, module.this.id) : null
vault_id = join("", local.vault_enabled ? aws_backup_vault.default[*].id : data.aws_backup_vault.existing[*].id)
vault_arn = join("", local.vault_enabled ? aws_backup_vault.default[*].arn : data.aws_backup_vault.existing[*].arn)
enabled = module.this.enabled
plan_enabled = local.enabled && var.plan_enabled
iam_role_enabled = local.enabled && var.iam_role_enabled
iam_role_name = local.enabled ? coalesce(var.iam_role_name, module.label_backup_role.id) : null
iam_role_arn = join("", var.iam_role_enabled ? aws_iam_role.default[*].arn : data.aws_iam_role.existing[*].arn)
iam_role_policies = ["policy/service-role/AWSBackupServiceRolePolicyForBackup", "policy/AWSBackupServiceRolePolicyForS3Backup"]
vault_enabled = local.enabled && var.vault_enabled
vault_name = local.enabled ? coalesce(var.vault_name, module.this.id) : null
vault_id = join("", local.vault_enabled ? aws_backup_vault.default[*].id : data.aws_backup_vault.existing[*].id)
vault_arn = join("", local.vault_enabled ? aws_backup_vault.default[*].arn : data.aws_backup_vault.existing[*].arn)
}

data "aws_partition" "current" {}
Expand Down Expand Up @@ -125,8 +126,8 @@ data "aws_iam_role" "existing" {
}

resource "aws_iam_role_policy_attachment" "default" {
count = local.iam_role_enabled ? 1 : 0
policy_arn = "arn:${data.aws_partition.current.partition}:iam::aws:policy/service-role/AWSBackupServiceRolePolicyForBackup"
for_each = { for role in local.iam_role_policies : role => role if local.iam_role_enabled }
policy_arn = "arn:${data.aws_partition.current.partition}:iam::aws:${each.value}"
role = join("", aws_iam_role.default[*].name)
}

Expand Down