data_sources.tf

data "aws_iam_policy" "read_only_access" {
  arn = "arn:aws:iam::aws:policy/ReadOnlyAccess"
}

resource "aws_iam_user" "accountant" {
  name = "just-looking"
}

resource "aws_iam_user_policy_attachment" "reading_is_fine" {
  user       = aws_iam_user.accountant
  policy_arn = data.aws_iam_policy.read_only_access.arn
}