s3-without-user.md

# bucket 
resource "aws_s3_bucket" "bucket" {
  bucket        = "${var.bucket}"
  force_destroy = "true"

  versioning {
    enabled = "true"
  }

  tags = "${var.tags}"
}

# grant user access to the bucket
resource "aws_s3_bucket_policy" "bucket_policy" {
  bucket = "${aws_s3_bucket.bucket.id}"

  policy = <<EOF
{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Principal":{
        "AWS": "${var.user_arn}"
      },
      "Action": [ "s3:*" ],
      "Resource": [
        "${aws_s3_bucket.bucket.arn}",
        "${aws_s3_bucket.bucket.arn}/*"
      ]
    }
  ]
}
EOF
}

output "bucket" {
  value = "${aws_s3_bucket.bucket.bucket}"
}