From 2d4da1aa863487e6d098e76c59711ade178c88ad Mon Sep 17 00:00:00 2001
From: Hubert Cornet <hcornet@noreply@tips-of-mine.fr>
Date: Fri, 8 Aug 2025 09:18:31 +0200
Subject: [PATCH] Actualiser iam.tf

---
 iam.tf | 31 +++++++++++++++++++++++++++----
 1 file changed, 27 insertions(+), 4 deletions(-)

diff --git a/iam.tf b/iam.tf
index 8e4bc1d..9152921 100644
--- a/iam.tf
+++ b/iam.tf
@@ -12,7 +12,6 @@ resource "aws_iam_group_policy_attachment" "administrators" {
   policy_arn = data.aws_iam_policy.administrator_access.arn
 }
 
-
 resource "aws_iam_user" "administrator" {
   name = "Administrator"
 }
@@ -28,15 +27,15 @@ resource "aws_iam_user_login_profile" "administrator" {
 }
 
 resource "aws_iam_access_key" "AccK" {
-  user = aws_iam_user.new_user.name
+  user = aws_iam_user.administrator.name
 }
 
 resource "aws_iam_user_policy" "iam" {
   name = "ListBuckets"
-  user = aws_iam_user.new_user.name
+  user = aws_iam_user.administrator.name
   policy = <<EOF
 {
-    "Version": "2022-1-6",
+    "Version": "2012-10-17",
     "Statement": [
     {
     "Effect": "Allow",
@@ -46,4 +45,28 @@ resource "aws_iam_user_policy" "iam" {
     ]
 }
 EOF
+}
+
+# Create IAM policy to allow S3 read access
+resource "aws_iam_policy" "s3_read_policy" {
+  name        = "s3_read_policy"
+  description = "Allows read access to files in the specified S3 bucket"
+  policy      = <<EOF
+{
+  "Version": "2012-10-17",
+  "Statement": [
+    {
+      "Effect": "Allow",
+      "Action": [
+        "s3:GetObject",
+        "s3:ListBucket"
+      ],
+      "Resource": [
+        "arn:aws:s3:::your-bucket-name/*",
+        "arn:aws:s3:::your-bucket-name"
+      ]
+    }
+  ]
+}
+EOF
 }
\ No newline at end of file