ecr: add s3 bucket and role policy for FVP job
for TFC-92. The summary of changes:
Create the S3 bucket for tuxtput
Create policy to access it, and attach it to existing ecr_push_pull role
make an instance profile that grants access to ecr_push_pull for instances it is attached to
Change-Id: Iba6520b9d533ff92255deb3b7bea9d2c708d082e
diff --git a/modules/resources/role_policy/main.tf b/modules/resources/role_policy/main.tf
new file mode 100644
index 0000000..be7a939
--- /dev/null
+++ b/modules/resources/role_policy/main.tf
@@ -0,0 +1,9 @@
+resource "aws_iam_role_policy" "role_policy" {
+ role = var.role_id
+ policy = templatefile(var.policy_file, {
+ effect = var.effect
+ actions = jsonencode(var.actions)
+ resources = jsonencode(var.resources)
+ }
+ )
+}