diff --git a/iam_policy.tf b/iam_policy.tf index c55e2a5..75df451 100644 --- a/iam_policy.tf +++ b/iam_policy.tf @@ -1,3 +1,20 @@ +resource "aws_iam_role" "rhel_x86_codepipeline_role" { + name = "rhel-x86-image-pipeline-demo-codepipeline-role" + + assume_role_policy = jsonencode({ + Version = "2012-10-17" + Statement = [ + { + Effect = "Allow" + Principal = { + Service = "codepipeline.amazonaws.com" + } + Action = "sts:AssumeRole" + } + ] + }) +} + resource "aws_iam_policy" "rhel_x86_codepipeline_permissions" { name = "rhel-x86-codepipeline-permissions" description = "IAM policy for RHEL x86 CodePipeline to access necessary AWS services" @@ -81,6 +98,6 @@ resource "aws_iam_policy" "rhel_x86_codepipeline_permissions" { } resource "aws_iam_role_policy_attachment" "rhel_x86_codepipeline_role_attachment" { - role = "rhel-x86-image-pipeline-demo-codepipeline-role" + role = aws_iam_role.rhel_x86_codepipeline_role.name policy_arn = aws_iam_policy.rhel_x86_codepipeline_permissions.arn -} \ No newline at end of file +}