humidifier-reservoir cogito example

reservoir

#!/usr/bin/env ruby

require 'cogito'  
require 'humidifier/reservoir'  
require 'json'

class PolicyMapper < Humidifier::Reservoir::BaseMapper  
  attribute :policy do |policy|
    {
      policy_document: {
        Version: '2012-10-17',
        Statement: JSON.parse(Cogito.to_json(policy))
      }
    }
  end
end

Humidifier::Reservoir.configure do |config|  
  config.stack_path = 'stacks'
  config.map :policies, to: 'AWS::IAM::ManagedPolicy', using: PolicyMapper
end

Humidifier::Reservoir::CLI.start(ARGV)

stacks_default_policies.yml

S3DefaultPolicy:  
  description: Grants S3 permissions
  policy: >
    ALLOW s3:ListBucket ON *;