Merge pull request #201 from ruby-no-kai/AWSManagementConsoleBasicUserAccess

AWSManagementConsoleBasicUserAccess

Author: sorah

tf/admin-iam/kaigi_staff.tf

@@ -39,6 +39,11 @@ resource "aws_iam_role_policy" "KaigiStaff_StreamingStaff" {
   policy = data.aws_iam_policy_document.StreamingStaff.json
 }
 
+resource "aws_iam_role_policy_attachment" "KaigiStaff_AWSManagementConsoleBasicUserAccess" {
+  role       = aws_iam_role.KaigiStaff.name
+  policy_arn = data.aws_iam_policy.AWSManagementConsoleBasicUserAccess.arn
+}
+
 #resource "aws_iam_role_policy" "KaigiStaff" {
 #  role   = aws_iam_role.KaigiStaff.name
 #  policy = data.aws_iam_policy_document.KaigiStaff.json

tf/admin-iam/noc_admin.tf

@@ -45,6 +45,10 @@ resource "aws_iam_policy" "NocAdminBase" {
 }
 
 data "aws_iam_policy_document" "NocAdminBase" {
+  source_policy_documents = [
+    data.aws_iam_policy.AWSManagementConsoleBasicUserAccess.policy,
+  ]
+
   statement {
     effect = "Allow"
     actions = [
@@ -255,3 +259,7 @@ data "aws_iam_policy_document" "NocAdmin_iam-with-boundary" {
     }
   }
 }
+
+data "aws_iam_policy" "AWSManagementConsoleBasicUserAccess" {
+  arn = "arn:aws:iam::aws:policy/AWSManagementConsoleBasicUserAccess"
+}

tf/admin-iam/streaming_staff.tf

@@ -100,5 +100,9 @@ data "aws_iam_policy_document" "StreamingStaff" {
     ]
     resources = ["*"]
   }
+}
 
+resource "aws_iam_role_policy_attachment" "StreamingStaff_AWSManagementConsoleBasicUserAccess" {
+  role       = aws_iam_role.StreamingStaff.name
+  policy_arn = data.aws_iam_policy.AWSManagementConsoleBasicUserAccess.arn
 }