Commit fa393efa by e0d

Merge pull request #82 from edx/feature/e0d/iam-association

adding iam role association to launch configurations
parents 5534cbca 660c306e
...@@ -1882,6 +1882,78 @@ ...@@ -1882,6 +1882,78 @@
] ]
} }
}, },
"EdxappRole": {
"Type": "AWS::IAM::Role",
"Properties": {
"AssumeRolePolicyDocument": {
"Statement": [ {
"Effect": "Allow",
"Principal": {
"Service": [ "ec2.amazonaws.com" ]
},
"Action": [ "sts:AssumeRole" ]
} ]
},
"Path": "/"
}
},
"EdxappInstanceProfile": {
"Type": "AWS::IAM::InstanceProfile",
"Properties": {
"Path": "/",
"Roles": [ {
"Ref": "EdxappRole"
} ]
}
},
"XqueueRole": {
"Type": "AWS::IAM::Role",
"Properties": {
"AssumeRolePolicyDocument": {
"Statement": [ {
"Effect": "Allow",
"Principal": {
"Service": [ "ec2.amazonaws.com" ]
},
"Action": [ "sts:AssumeRole" ]
} ]
},
"Path": "/"
}
},
"XqueueInstanceProfile": {
"Type": "AWS::IAM::InstanceProfile",
"Properties": {
"Path": "/",
"Roles": [ {
"Ref": "XqueueRole"
} ]
}
},
"XServerRole": {
"Type": "AWS::IAM::Role",
"Properties": {
"AssumeRolePolicyDocument": {
"Statement": [ {
"Effect": "Allow",
"Principal": {
"Service": [ "ec2.amazonaws.com" ]
},
"Action": [ "sts:AssumeRole" ]
} ]
},
"Path": "/"
}
},
"XServerInstanceProfile": {
"Type": "AWS::IAM::InstanceProfile",
"Properties": {
"Path": "/",
"Roles": [ {
"Ref": "XServerRole"
} ]
}
},
"EdxServerUser":{ "EdxServerUser":{
"Type":"AWS::IAM::User", "Type":"AWS::IAM::User",
"Properties":{ "Properties":{
...@@ -1970,6 +2042,7 @@ ...@@ -1970,6 +2042,7 @@
} }
}, },
"Properties":{ "Properties":{
"IamInstanceProfile":{ "Ref":"EdxappInstanceProfile" },
"SecurityGroups":[ "SecurityGroups":[
{ {
"Ref":"EdxappServerSecurityGroup" "Ref":"EdxappServerSecurityGroup"
...@@ -2368,6 +2441,7 @@ ...@@ -2368,6 +2441,7 @@
} }
}, },
"Properties":{ "Properties":{
"IamInstanceProfile":{ "Ref":"XqueueInstanceProfile" },
"SecurityGroups":[ "SecurityGroups":[
{ {
"Ref":"XqueueServerSecurityGroup" "Ref":"XqueueServerSecurityGroup"
...@@ -3165,6 +3239,7 @@ ...@@ -3165,6 +3239,7 @@
} }
}, },
"Properties":{ "Properties":{
"IamInstanceProfile":{ "Ref":"XServerInstanceProfile" },
"SecurityGroups":[ "SecurityGroups":[
{ {
"Ref":"XServerSecurityGroup" "Ref":"XServerSecurityGroup"
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment