Skip to content

Commit bdad602

Browse files
oliviabholmesczimergebot
authored andcommitted
adding in route53 Read Only Access (#96)
Adding in Route53ReadOnly Access to Route53Domains-PowerUser RoleNeeded to add the route53ReadOnly policy to the Route53 power user IAM role that I created previously. I need to be able to read and download the zone files for our hosted domains and this should give me the privileges to do that.
1 parent a361c8d commit bdad602

File tree

2 files changed

+7
-2
lines changed

2 files changed

+7
-2
lines changed

aws-iam-role-route53domains-poweruser/README.md

+2-2
Original file line numberDiff line numberDiff line change
@@ -1,12 +1,12 @@
11
# AWS IAM role for Route53Domains Poweruser
22

3-
This module will create a role which has Route53Domains FullAccess privileges.
3+
This module will create a role which has Route53Domains FullAccess privileges and Route53 ReadOnly priveleges.
44

55
## Example
66

77
```hcl
88
module "route53domains-poweruser" {
9-
source = "github.com/chanzuckerberg/cztack//aws-iam-role-route53domains-poweruser?ref=v0.14.0"
9+
source = "github.com/chanzuckerberg/cztack/aws-iam-role-route53domains-poweruser?ref=v0.14.0"
1010
1111
# The name of the role to create in this account.
1212
role_name = "..."

aws-iam-role-route53domains-poweruser/main.tf

+5
Original file line numberDiff line numberDiff line change
@@ -19,3 +19,8 @@ resource "aws_iam_role_policy_attachment" "route53domains-fullaccess" {
1919
role = "${aws_iam_role.route53domains-poweruser.name}"
2020
policy_arn = "arn:aws:iam::aws:policy/AmazonRoute53DomainsFullAccess"
2121
}
22+
23+
resource "aws_iam_role_policy_attachment" "route53-readonly" {
24+
role = "${aws_iam_role.route53domains-poweruser.name}"
25+
policy_arn = "arn:aws:iam::aws:policy/AmazonRoute53ReadOnlyAccess"
26+
}

0 commit comments

Comments
 (0)