dmlayton

resource "aws_iam_group" "client" {
  name = var.client.name
}

dmlayton

resource "aws_iam_group_policy" "client_bucket" {
  name = "${aws_iam_group.client.name}-bucket=policy"
  group = aws_iam_group.client.name

  policy = data.aws_iam_policy_document.client_bucket.json
}

dmlayton

variable "client" {
  type = map
}

variable "users" {
  type = list(string)
}