Skip to content

Commit 546fe75

Browse files
committed
feat: added api policy in example
1 parent e43db98 commit 546fe75

File tree

1 file changed

+25
-0
lines changed

1 file changed

+25
-0
lines changed

_example/complete/example.tf

Lines changed: 25 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -83,4 +83,29 @@ EOF
8383
# Api Gateway Api Key
8484
key_count = 2
8585
key_names = ["test", "test1"]
86+
87+
## Api Policy
88+
89+
api_policy = data.aws_iam_policy_document.test.json
90+
8691
}
92+
93+
data "aws_iam_policy_document" "test" {
94+
statement {
95+
effect = "Allow"
96+
97+
principals {
98+
type = "AWS"
99+
identifiers = ["*"]
100+
}
101+
102+
actions = ["execute-api:Invoke"]
103+
resources = [module.api-gateway.execution_arn]
104+
105+
condition {
106+
test = "IpAddress"
107+
variable = "aws:SourceIp"
108+
values = ["123.123.123.123/32"]
109+
}
110+
}
111+
}

0 commit comments

Comments
 (0)