sns.tf

data "aws_iam_policy_document" "sns_policy" {
  statement {
    effect    = "Allow"

    principals {
      identifiers = ["*"]
      type = "AWS"
    }

    actions   = [
      "SNS:Publish"
    ]

    resources = [
      "arn:aws:sns:us-east-1:*:s3_fanout"
    ]

    condition = {
      test     = "ArnLike"
      variable = "aws:SourceArn"
      values   = [
        "${aws_s3_bucket.source-bucket.arn}"
      ]
    }

  }
}

resource "aws_sns_topic" "s3_fanout" {
  name   = "s3_fanout"
  policy = "${data.aws_iam_policy_document.sns_policy.json}"
}