如何在 terraform 的 AWS S3 存储桶策略中获取 sid

Question

我想将策略附加到 S3 存储桶资源。

我的 terraform 基础设施，

resource "aws_s3_bucket" "storage" {
  bucket = "${var.service}-${local.stage}-storage"
  acl    = "public-read"

  tags = {
    Service = var.service
    Stage   = local.stage
  }

  cors_rule {
    allowed_headers = [
      "*"
    ]
    allowed_methods = [
      "GET",
      "HEAD"
    ]
    allowed_origins = [
      "*"
    ]
    max_age_seconds = 3000
  }
}

此存储桶用于 Web 静态文件托管。我需要公开存储桶策略。

我在 terraform 中的政策，

resource "aws_s3_bucket_policy" "storage-policy" {
  bucket = aws_s3_bucket.storage.id

  policy = <<POLICY
{
  "Version": "2012-10-17",
  "Id": "????????",
  "Statement": [
    {
      "Sid": "????????",
      "Effect": "Allow",
      "Principal": "*",
      "Action": "*",
      "Resource": "arn:aws:s3:::BUCKET-NAME/*"
    }
  ]
}
POLICY
}

在这段代码中，我需要获取 Id、Sid 字段值。 我怎么能得到这个？ 谢谢。

Answer 1

Id 和 Sid 是你想要的。例如：

resource "aws_s3_bucket_policy" "storage-policy" {
  bucket = aws_s3_bucket.storage.id

  policy = <<POLICY
{
  "Version": "2012-10-17",
  "Id": "my-bucket-polict",
  "Statement": [
    {
      "Sid": "allow-all-access",
      "Effect": "Allow",
      "Principal": "*",
      "Action": "*",
      "Resource": "arn:aws:s3:::BUCKET-NAME/*"
    }
  ]
}
POLICY
}