chore: add aws_iam_role

1 files changed, 29 insertions, 0 deletions

diff --git a/terraform/iam.tf b/terraform/iam.tf
new file mode 100644
index 0000000..7501373
--- /dev/null
+++ b/terraform/iam.tf
@@ -0,0 +1,29 @@
+# define
+
+resource "aws_iam_role" "bentley_service_role" {
+    assume_role_policy = <<EOF
+    {
+        "Version": "2012-10-17",
+        "Statement": [
+            {
+                "Effect": "Allow",
+                "Action": [
+                    "sts:AssumeRole"
+                ],
+                "Principal": {
+                    "Service": [
+                        "lambda.amazonaws.com",
+                        "s3.amazonaws.com",
+                        "cloudwatch.amazonaws.com",
+                        "events.amazonaws.com",
+                    ]
+                }
+            }
+        ]
+    }
+    EOF
+}
+
+# create
+
+# attach
\ No newline at end of file