@@ -7,7 +7,6 @@ resource "aws_iam_role" "segment_data_lake_iam_role" {
77 tags = " ${ local . tags } "
88}
99
10-
1110# Policy attached to the IAM role.
1211# https://www.terraform.io/docs/providers/aws/d/iam_policy_document.html
1312data "aws_iam_policy_document" "segment_data_lake_assume_role_policy_document" {
@@ -59,7 +58,7 @@ data "aws_iam_policy_document" "segment_data_lake_policy_document" {
5958 " elasticmapreduce:DescribeCluster" ,
6059 " elasticmapreduce:DescribeStep" ,
6160 " elasticmapreduce:RunJobFlow" ,
62- " elasticmapreduce:TerminateJobFlows"
61+ " elasticmapreduce:TerminateJobFlows" ,
6362 ]
6463
6564 resources = [
@@ -69,6 +68,7 @@ data "aws_iam_policy_document" "segment_data_lake_policy_document" {
6968 condition {
7069 test = " StringEquals"
7170 variable = " elasticmapreduce:ResourceTag/vendor"
71+
7272 values = [
7373 " segment" ,
7474 ]
@@ -141,28 +141,24 @@ data "aws_iam_policy_document" "segment_data_lake_policy_document" {
141141 # Gives the EMR service role permission to create cluster
142142 statement {
143143 actions = [
144- " iam:PassRole"
144+ " iam:PassRole" ,
145145 ]
146146
147147 resources = [
148148 " ${ aws_iam_role . segment_emr_service_role . arn } " ,
149149 " ${ aws_iam_role . segment_emr_instance_profile_role . arn } " ,
150- " ${ aws_iam_role . segment_emr_autoscaling_role . arn } "
150+ " ${ aws_iam_role . segment_emr_autoscaling_role . arn } " ,
151151 ]
152152
153153 effect = " Allow"
154154 }
155-
156155}
157156
158-
159157resource "aws_iam_role_policy_attachment" "segment_data_lake_role_policy_attachment" {
160158 role = " ${ aws_iam_role . segment_data_lake_iam_role . name } "
161159 policy_arn = " ${ aws_iam_policy . segment_data_lake_policy . arn } "
162160}
163161
164-
165-
166162# IAM role for EMR Service
167163resource "aws_iam_role" "segment_emr_service_role" {
168164 name = " SegmentEMRServiceRole${ var . suffix } "
@@ -264,8 +260,6 @@ resource "aws_iam_role_policy" "segment_emr_service_policy" {
264260EOF
265261}
266262
267-
268-
269263# IAM Role for EC2 Instance Profile
270264resource "aws_iam_role" "segment_emr_instance_profile_role" {
271265 name = " SegmentEMRInstanceProfileRole${ var . suffix } "
@@ -292,7 +286,6 @@ resource "aws_iam_instance_profile" "segment_emr_instance_profile" {
292286 roles = [" ${ aws_iam_role . segment_emr_instance_profile_role . name } " ]
293287}
294288
295-
296289resource "aws_iam_role_policy" "segment_emr_instance_profile_policy" {
297290 name = " SegmentEMRInstanceProfilePolicy${ var . suffix } "
298291 role = " ${ aws_iam_role . segment_emr_instance_profile_role . id } "
@@ -368,7 +361,6 @@ resource "aws_iam_role_policy" "segment_emr_instance_profile_policy" {
368361EOF
369362}
370363
371-
372364# IAM Role for EMR Autoscaling role
373365resource "aws_iam_role" "segment_emr_autoscaling_role" {
374366 name = " SegmentEMRAutoscalingRole${ var . suffix } "
0 commit comments