keboola-file-storage.json

{
    "AWSTemplateFormatVersion": "2010-09-09",
    "Resources": {
        "S3FilesBucket": {
            "Type": "AWS::S3::Bucket",
            "Properties": {
                "CorsConfiguration": {
                    "CorsRules": [
                        {
                            "AllowedHeaders": [
                                "*"
                            ],
                            "AllowedMethods": [
                                "GET",
                                "PUT",
                                "POST",
                                "DELETE"
                            ],
                            "AllowedOrigins": [
                                "*"
                            ],
                            "MaxAge": "3600"
                        }
                    ]
                },
                "LifecycleConfiguration": {
                    "Rules": [
                        {
                            "Id": "After 180 days to glacier and 270 delete",
                            "Prefix": "exp-180",
                            "ExpirationInDays": 270,
                            "Transition": {
                                "StorageClass": "GLACIER",
                                "TransitionInDays": 180
                            },
                            "Status": "Enabled"
                        },
                        {
                            "Id": "Delete after 30 days",
                            "Prefix": "exp-30",
                            "ExpirationInDays": 30,
                            "Status": "Enabled"
                        }
                    ]
                },
                "Tags": [
                    {
                        "Key": "Name",
                        "Value": "keboola-file-storage"
                    }
                ]
            }
        },

        "User": {
            "Type": "AWS::IAM::User",
            "Properties": {
                "Path": "/",
                "Policies": [
                    {
                        "PolicyName": "S3Access",
                        "PolicyDocument": {
                            "Version": "2012-10-17",
                            "Statement": [
                                {
                                    "Effect": "Allow",
                                    "Action": [ "s3:*" ],
                                    "Resource": [
                                        {
                                            "Fn::Join": [
                                                "", [ "arn:aws:s3:::", {
                                                    "Ref": "S3FilesBucket"
                                                } , "/*" ]
                                            ]
                                        }
                                    ]
                                },
                                {
                                    "Sid": "AllowListingOfUserFolder",
                                    "Action": [
                                        "s3:ListBucket",
                                        "s3:GetBucketLocation"
                                    ],
                                    "Effect": "Allow",
                                    "Resource": [
                                        {
                                            "Fn::Join": [
                                                "",
                                                [
                                                    "arn:aws:s3:::",
                                                    {
                                                        "Ref": "S3FilesBucket"
                                                    }
                                                ]
                                            ]
                                        }
                                    ]
                                }
                            ]
                        }
                    },
                    {
                        "PolicyName": "STSAccess",
                        "PolicyDocument": {
                            "Version": "2012-10-17",
                            "Statement": [
                                {
                                    "Effect": "Allow",
                                    "Action": [
                                        "sts:GetFederationToken"
                                    ],
                                    "Resource": [
                                        "*"
                                    ]
                                }
                            ]
                        }
                    }
                ]
            }
        }
    },
    "Outputs": {
        "region": {
            "Value": {
                "Ref": "AWS::Region"
            }
        },
        "filesBucket": {
            "Value": {
                "Ref": "S3FilesBucket"
            }
        },
        "user": {
            "Value": {
                "Ref": "User"
            }
        }

    }
}