resource "minio_s3_bucket" "terraform" {
  bucket = "terraform"
  acl    = "public-read-write"
}

resource "minio_iam_policy" "terraform-access" {
  name = "terraform-access"
  policy= <<EOF
{
  "Version":"2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "s3:ListBucket"
      ],
      "Resource": "arn:aws:s3:::terraform-trygvis"
    },
    {
      "Effect": "Allow",
      "Action": [
        "s3:ListBucket",
        "s3:GetObject",
        "s3:PutObject"
      ],
      "Resource": "arn:aws:s3:::terraform/*"
    }
  ]
}
EOF
}

# Users

resource "minio_iam_user" "terraform-trygvis" {
  name = "terraform-trygvis"
}

resource "minio_iam_user_policy_attachment" "terraform-trygvis" {
  user_name  = minio_iam_user.terraform-trygvis.id
  policy_name = minio_iam_policy.terraform-access.id
}

output "terraform-trygvis_secret" {
  value = minio_iam_user.terraform-trygvis.secret
}