Pulumi IaC IAM User Change #2

index.ts

import * as aws from '@pulumi/aws';

const defaultTags = { Creator: 'pulumi' };

const timUser = new aws.iam.User('tim.myers', {
  name: 'tim.myers',
  tags: defaultTags,
});

new aws.iam.UserPolicyAttachment('tim.myers-readonly', {
  user: timUser.name,
  policyArn: aws.iam.getPolicyOutput({ name: 'ReadOnlyAccess'}).arn,
});

new aws.iam.UserPolicyAttachment('tim.myers-password', {
  user: timUser.name,
  policyArn: aws.iam.getPolicyOutput({ name: 'IAMUserChangePassword'}).arn,
});

ew aws.iam.UserPolicy('tim.myers-infrastructure-role', {
  user: timUser.name,
  policy: {
    Version: '2012-10-17',
    Statement: [{
      Effect: 'Allow',
      Action: 'sts:AssumeRole',
      Resource: infrastructureRole.arn,
    }]
  },
});