S3のバケットポリシーを作成するtf

main.tf

provider "aws" {
  region  = "ap-northeast-1"
  version = "~> 2.7.0"
}

resource "aws_s3_bucket" "s3_experiment" {
  bucket = "hiroki.s3experiment"
  acl = "private" 
}

data "aws_iam_policy_document" "bucket_policy_document" {
  statement = {
    principals = [
      {
        type = "AWS"
        identifiers = ["arn:aws:iam::~~"]
      }
    ]
    actions = ["s3:*"]
    resources = ["arn:aws:s3:::hiroki.s3experiment"]

    condition = {
      test     = "StringLike"
      variable = "s3:prefix"
      values = [
        "access_test/*"
      ]
    }
  }
}

resource "aws_s3_bucket_policy" "mys3pol" {
  bucket = "${aws_s3_bucket.s3_experiment.id}"
  policy = "${data.aws_iam_policy_document.bucket_policy_document.json}"
}