-
Notifications
You must be signed in to change notification settings - Fork 1
/
dynamo-scoredb.tf
58 lines (55 loc) · 1.16 KB
/
dynamo-scoredb.tf
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
resource "aws_dynamodb_table" "score" {
name = "score"
hash_key = "userID"
billing_mode = "PROVISIONED"
read_capacity = 1
write_capacity = 1
attribute {
name = "userID"
type = "S"
}
tags = {
Name = "dynamodb-table-score"
}
}
resource "aws_iam_policy" "score-lambda-policy" {
policy = jsonencode({
Version = "2012-10-17"
Statement = [
{
Effect = "Allow"
Action = [
"dynamodb:GetItem",
"dynamodb:BatchGetItem"
]
Resource = [
aws_dynamodb_table.score.arn
]
}
]
})
}
resource "aws_iam_policy" "worker-lambda-policy" {
policy = jsonencode({
Version = "2012-10-17"
Statement = [
{
Effect = "Allow"
Action = [
"dynamodb:GetItem",
"dynamodb:BatchGetItem",
"dynamodb:Query",
"dynamodb:DeleteItem",
"dynamodb:BatchWriteItem",
"dynamodb:ExecuteStatement",
"dynamodb:ExecuteTransaction",
"dynamodb:PutItem",
"dynamodb:UpdateItem"
]
Resource = [
aws_dynamodb_table.score.arn
]
}
]
})
}