ianl-agent 0.1.0

Add your description here

IAM Role for EC2 Instance to Read from S3 Bucket

Overview

This Terraform configuration creates an IAM role, policy, and instance profile for an EC2 instance to read from an S3 bucket named my-app-data.

Components

1. IAM Role: Allows EC2 instances to assume the role.
2. IAM Policy: Grants read-only access to the specified S3 bucket.
3. Instance Profile: Attaches the IAM role to EC2 instances.

Usage

1. Ensure you have the required permissions to create IAM roles and policies.
2. Run tofu init to initialize the Terraform configuration.
3. Run tofu apply to create the resources.

Notes

• The IAM role follows the naming convention ianl-agent-* for compliance.
• Least-privilege principles are applied by restricting S3 actions to GetObject and ListBucket.
• The instance profile allows EC2 instances to use this role.