Merge pull request #2 from asicsdigital/casper-add-prefix-condition

Added Prefix Condition per SRE-88
asicsdigital · Jan 14, 2020 · 018a2a8 · 018a2a8
2 parents 531b13c + e1b27a3
commit 018a2a8
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/iam-source.tf b/iam-source.tf
@@ -17,6 +17,15 @@ data "aws_iam_policy_document" "user_policy" {
     resources = [
       "${local.bucket_arn}",
     ]
+
+    condition {
+      test     = "ForAnyValue:StringLike"
+      variable = "s3:prefix"
+
+      values = [
+        "${var.prefix}*",
+      ]
+    }
   }
 }