add iam role app_task

ministryofjustice · Feb 2, 2024 · 2ebb6eb · 2ebb6eb
1 parent 234fac7
commit 2ebb6eb
Showing 1 changed file with 27 additions and 0 deletions.
diff --git a/terraform/environments/cdpt-ifs/ecs.tf b/terraform/environments/cdpt-ifs/ecs.tf
@@ -68,3 +68,30 @@ resource "aws_ecs_cluster" "ecs_cluster" {
   }
 }
 
+resource "aws_iam_role" "app_task" {
+  name = "task-${var.networking[0].application}"
+
+  assume_role_policy = <<EOF
+{
+  "Version": "2012-10-17",
+  "Statement": [
+    {
+      "Action": "sts:AssumeRole",
+      "Principal": {
+        "Service": "ecs-tasks.amazonaws.com"
+      },
+      "Effect": "Allow",
+      "Sid": ""
+    }
+  ]
+}
+EOF
+
+  tags = merge(
+    local.tags,
+    {
+      Name = "task-${var.networking[0].application}"
+    },
+  )
+}
+