terrafying-components 1.14.0 → 1.14.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 027ba420f40c64ea39dabaa69b9f6b63feaafd7e43b7cb016e735aeb4a46fb5b
-  data.tar.gz: dbbc8f0bb1a659c33a3a47b39dabda6a512d4b83288a6c0d2559c127eca6304c
+  metadata.gz: a3644c985d4544cc5edc56c0c0cd1a4ba4555feed877bccb372bad3b819eb6e2
+  data.tar.gz: 4289e4f344796bd9024ccc9afedbab7fa9124e1abe755010f0ab849ff6d33ab8
 SHA512:
-  metadata.gz: 302656e4916d511bde944f6ebf9c240c16dd815bebf4a8486699825522a869611292fff9b885de6cd32f0c4dbcd095ffb49ffe3440d18508d284b9cd6fe074c8
-  data.tar.gz: 86d7be5a5a00bf6a60ac90cdd878c1696efd3e1b58ad6f03f1a7934e7a1c7b503b864df9b5feed50aacb4e84f77844e1cf035c3d108868f7fa6c4b850fce383c
+  metadata.gz: a3b2b4919e56cbc2bd1c80210091962af019033309b447944bc5732bbf64916480bec4c61728f3f5dcff61a6d177f254f30ee791d2d0fa7b4d563f6960c8883f
+  data.tar.gz: 6d0353aa615de92435980888ebfc63c40eb1739c743e4b5d3c5272c3ea276f9389c05ed20816beb9b6220fcf7d24ff2fd57b562e7374374aa13ec3381d174d4f

data/lib/terrafying/components/letsencrypt.rb

@@ -228,7 +228,7 @@ module Terrafying
             }
           }
         }
-        # Lambda execution role
+
         resource :aws_iam_role, "#{@name}_lambda_execution", {
           name: "#{@name}_lambda_execution",
           assume_role_policy: JSON.pretty_generate(
@@ -242,20 +242,40 @@ module Terrafying
                         },
                       Effect: "Allow",
                       Sid: ""
-                    },
+                    }
+                  ]
+                }
+              )
+            }
+
+        resource :aws_iam_policy, "#{@name}_lambda_s3", {
+          name: "#{@name}_lambda_s3",
+          description: "A policy for the #{@name}-lambda function to access S3",
+          policy: JSON.pretty_generate(
+                {
+                  Version: "2012-10-17",
+                  Statement: [
                     {
                       Action: [
                         "s3:Put*",
                         "s3:Get*",
                         "s3:DeleteObject"
-                        ],
-                      Resource: ["arn:aws:s3:::#{@bucket}/#{@prefix}"],
+                      ],
+                      Resource: [
+                        "arn:aws:s3:::#{@bucket}/#{@prefix}"
+                      ],
                       Effect: "Allow"
                     }
                   ]
                 }
               )
             }
+
+        resource :aws_iam_role_policy_attachment, "#{@name}_lambda_policy_attachment", {
+            role: "${aws_iam_role.#{@name}_lambda_execution.name}",
+            policy_arn: "${aws_iam_policy.#{@name}_lambda_s3.arn}"
+            }
+
           self
         end
 

data/lib/terrafying/components/version.rb

@@ -2,6 +2,6 @@
 
 module Terrafying
   module Components
-    VERSION = '1.14.0'
+    VERSION = '1.14.1'
   end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: terrafying-components
 version: !ruby/object:Gem::Version
-  version: 1.14.0
+  version: 1.14.1
 platform: ruby
 authors:
 - uSwitch Limited
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2019-12-03 00:00:00.000000000 Z
+date: 2019-12-10 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rake