This is an automated email from the ASF dual-hosted git repository. juanpablo pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/jspwiki.git
commit 971d77b31809547bab97f19d3d9cb36c100bb7fc Author: Julien Masnada <[email protected]> AuthorDate: Mon Mar 1 09:20:22 2021 +0100 Added IAM role stack --- .../cloudformation/jspwiki-iam-role.yaml | 67 ++++++++++++++++++++++ 1 file changed, 67 insertions(+) diff --git a/jspwiki-kendra-searchprovider/cloudformation/jspwiki-iam-role.yaml b/jspwiki-kendra-searchprovider/cloudformation/jspwiki-iam-role.yaml new file mode 100644 index 0000000..1eb60b4 --- /dev/null +++ b/jspwiki-kendra-searchprovider/cloudformation/jspwiki-iam-role.yaml @@ -0,0 +1,67 @@ +AWSTemplateFormatVersion: "2010-09-09" +Description: > + Create an IAM Role that allows that can be attached to an EC2 Instance Profile in order to access a Kendra Index +Metadata: + + AWS::CloudFormation::Interface: + ParameterGroups: + - Label: + default: Parameters related to the Kendra Index and DataSource + Parameters: + - IndexName + - DataSourceName + ParameterLabels: + IndexName: + default: "The Kendra Index's Name" + DataSourceName: + default: "The Kendra DataSource's Name" + +Parameters: + + IndexName: + Description: "The name of the Kendra Index to create" + Type: String + Default: "JSPWikiIndex" + + DataSourceName: + Description: "The name of the Kendra DataSource to create" + Type: String + Default: "JSPWikiDataSource" + +Resources: + + JSPWikiRole: + Type: AWS::IAM::Role + Properties: + AssumeRolePolicyDocument: + Version: 2012-10-17 + Statement: + - Effect: "Allow" + Principal: + Service: + - ec2.amazonaws.com + Action: + - sts:AssumeRole + Path: "/" + Policies: + - PolicyName: AllowJSPWikiAccessToKendra + PolicyDocument: + Version: 2012-10-17 + Statement: + - Sid: AllowAccessToListOfIndices + Effect: Allow + Action: + - kendra:ListIndices + Resource: "*" + - Sid: AllowAccessToJSPWikiIndex + Effect: Allow + Action: + - kendra:Query + - kendra:StopDataSourceSyncJob + - kendra:BatchPutDocument + - kendra:StartDataSourceSyncJob + - kendra:ListDataSources + - kendra:BatchDeleteDocument + Resource: + - Fn::Sub: "arn:${AWS::Partition}:kendra:${AWS::Region}:${AWS::AccountId}:index/${IndexName}" + - Fn::Sub: "arn:${AWS::Partition}:kendra:${AWS::Region}:${AWS::AccountId}:index/${IndexName}/data-source/${DataSourceName}" \ No newline at end of file
