From 3cc308e434f4a3218cb35c6e035038cf03896ded Mon Sep 17 00:00:00 2001
From: satyamuralidhar <immurali5>
Date: Wed, 2 Jun 2021 11:07:15 +0530
Subject: [PATCH] iam policies are converted in to json file using provisioners

---
 .../blue-team-firewalls.tf                    | 35 ++-----------------
 .../scripts/blue-team-bootstrappolicy.json    | 15 ++++++++
 .../scripts/blue-team-bootstraprole.json      | 12 +++++++
 3 files changed, 30 insertions(+), 32 deletions(-)
 create mode 100644 aws/Jenkins-sans-Panhandler/scripts/blue-team-bootstrappolicy.json
 create mode 100644 aws/Jenkins-sans-Panhandler/scripts/blue-team-bootstraprole.json

diff --git a/aws/Jenkins-sans-Panhandler/blue-team-firewalls.tf b/aws/Jenkins-sans-Panhandler/blue-team-firewalls.tf
index b3a16d6e..1c1f7d9d 100644
--- a/aws/Jenkins-sans-Panhandler/blue-team-firewalls.tf
+++ b/aws/Jenkins-sans-Panhandler/blue-team-firewalls.tf
@@ -1,43 +1,14 @@
 resource "aws_iam_role" "blue-team-bootstraprole" {
   name = "blue-team-bootstraprole-${random_pet.blue_team.id}"
 
-  assume_role_policy = <<EOF
-{
-  "Version": "2012-10-17",
-  "Statement": [
-    {
-      "Effect": "Allow",
-      "Principal": {
-      "Service": "ec2.amazonaws.com"
-    },
-      "Action": "sts:AssumeRole"
-    }
-  ]
-}
-EOF
-}
+  assume_role_policy = "${file(bule-team-bootstraprole)}"
 
 resource "aws_iam_role_policy" "blue-team-bootstrappolicy" {
   name = "blue-team-bootstrappolicy-${random_pet.blue_team.id}"
   role = "${aws_iam_role.blue-team-bootstraprole.id}"
 
-  policy = <<EOF
-{
-  "Version" : "2012-10-17",
-  "Statement": [
-    {
-      "Effect": "Allow",
-      "Action": "s3:ListBucket",
-      "Resource": "arn:aws:s3:::${aws_s3_bucket.bootstrap_bucket.bucket}"
-    },
-    {
-    "Effect": "Allow",
-    "Action": "s3:GetObject",
-    "Resource": "arn:aws:s3:::${aws_s3_bucket.bootstrap_bucket.bucket}/*"
-    }
-  ]
-}
-EOF
+  policy = "${file("blue-team-bootstrappolicy.json")}"
+
 }
 
 resource "aws_iam_instance_profile" "blue-team-bootstrapinstanceprofile" {
diff --git a/aws/Jenkins-sans-Panhandler/scripts/blue-team-bootstrappolicy.json b/aws/Jenkins-sans-Panhandler/scripts/blue-team-bootstrappolicy.json
new file mode 100644
index 00000000..b93ad202
--- /dev/null
+++ b/aws/Jenkins-sans-Panhandler/scripts/blue-team-bootstrappolicy.json
@@ -0,0 +1,15 @@
+{
+    "Version" : "2012-10-17",
+    "Statement": [
+      {
+        "Effect": "Allow",
+        "Action": "s3:ListBucket",
+        "Resource": "arn:aws:s3:::${aws_s3_bucket.bootstrap_bucket.bucket}"
+      },
+      {
+      "Effect": "Allow",
+      "Action": "s3:GetObject",
+      "Resource": "arn:aws:s3:::${aws_s3_bucket.bootstrap_bucket.bucket}/*"
+      }
+    ]
+  }
\ No newline at end of file
diff --git a/aws/Jenkins-sans-Panhandler/scripts/blue-team-bootstraprole.json b/aws/Jenkins-sans-Panhandler/scripts/blue-team-bootstraprole.json
new file mode 100644
index 00000000..10ca1ff6
--- /dev/null
+++ b/aws/Jenkins-sans-Panhandler/scripts/blue-team-bootstraprole.json
@@ -0,0 +1,12 @@
+{
+    "Version": "2012-10-17",
+    "Statement": [
+      {
+        "Effect": "Allow",
+        "Principal": {
+        "Service": "ec2.amazonaws.com"
+      },
+        "Action": "sts:AssumeRole"
+      }
+    ]
+  }
\ No newline at end of file