dynamodb-access

dynamodb-access.tf

# DynamoDB

data "aws_iam_policy_document" "tables" {
  statement {
    actions   = ["dynamodb:*"]
    resources = ["${var.table_arns}"]
  }
}

resource "aws_iam_policy" "tables_policy" {
  name   = "dynamodb-access-from-${var.app_name}"
  path   = "/"
  policy = "${data.aws_iam_policy_document.tables.json}"
}

resource "aws_iam_policy_attachment" "tables_access" {
  name       = "dynamodb-access-from-${var.app_name}-attachment"
  roles      = ["${var.app_role_name}"]
  policy_arn = "${aws_iam_policy.tables_policy.arn}"
}