oidc.tf 543 B

1234567891011121314151617181920212223242526
  1. module "oidc_github" {
  2. source = "unfunco/oidc-github/aws"
  3. iam_role_name = "GitHubOIDC-for-growi"
  4. iam_role_inline_policies = {
  5. "inline_policy" : data.aws_iam_policy_document.policy_document.json
  6. }
  7. github_repositories = [
  8. "growilabs/growi",
  9. ]
  10. }
  11. data "aws_iam_policy_document" "policy_document" {
  12. statement {
  13. actions = [
  14. "codebuild:StartBuild",
  15. "codebuild:StopBuild",
  16. "codebuild:RetryBuild",
  17. "codebuild:BatchGetBuilds"
  18. ]
  19. resources = [
  20. module.codebuild.project_arn
  21. ]
  22. }
  23. }