UNPKG

haven-secrets-core

Version:

Core for Haven, the easy to use centralized secrets manager.

164 lines 5.53 kB
--- Resources: LockitTest1DevReadGroup: Type: AWS::IAM::Group Properties: GroupName: LockitTest1DevReadGroup Path: /Lockit/ Policies: - PolicyName: LockitTest1DevReadPolicy PolicyDocument: Version: 2012-10-17 Statement: - Effect: Allow Action: - dynamodb:Scan - dynamodb:GetItem Resource: arn:aws:dynamodb:undefined:undefined:table/LockitTest1Dev - Effect: Allow Action: kms:Decrypt Resource: arn:aws:kms:undefined:undefined:key/undefined LockitTest1DevWriteGroup: Type: AWS::IAM::Group Properties: GroupName: LockitTest1DevWriteGroup Path: /Lockit/ Policies: - PolicyName: LockitTest1DevWritePolicy PolicyDocument: Version: 2012-10-17 Statement: - Effect: Allow Action: - dynamodb:PutItem Resource: arn:aws:dynamodb:undefined:undefined:table/LockitTest1Dev - Effect: Allow Action: - kms:Encrypt - kms:GenerateDataKey Resource: arn:aws:kms:undefined:undefined:key/undefined LockitTest1StgReadGroup: Type: AWS::IAM::Group Properties: GroupName: LockitTest1StgReadGroup Path: /Lockit/ Policies: - PolicyName: LockitTest1StgReadPolicy PolicyDocument: Version: 2012-10-17 Statement: - Effect: Allow Action: - dynamodb:Scan - dynamodb:GetItem Resource: arn:aws:dynamodb:undefined:undefined:table/LockitTest1Stg - Effect: Allow Action: kms:Decrypt Resource: arn:aws:kms:undefined:undefined:key/undefined LockitTest1StgWriteGroup: Type: AWS::IAM::Group Properties: GroupName: LockitTest1StgWriteGroup Path: /Lockit/ Policies: - PolicyName: LockitTest1StgWritePolicy PolicyDocument: Version: 2012-10-17 Statement: - Effect: Allow Action: - dynamodb:PutItem Resource: arn:aws:dynamodb:undefined:undefined:table/LockitTest1Stg - Effect: Allow Action: - kms:Encrypt - kms:GenerateDataKey Resource: arn:aws:kms:undefined:undefined:key/undefined LockitTest1ProdReadGroup: Type: AWS::IAM::Group Properties: GroupName: LockitTest1ProdReadGroup Path: /Lockit/ Policies: - PolicyName: LockitTest1ProdReadPolicy PolicyDocument: Version: 2012-10-17 Statement: - Effect: Allow Action: - dynamodb:Scan - dynamodb:GetItem Resource: arn:aws:dynamodb:undefined:undefined:table/LockitTest1Prod - Effect: Allow Action: kms:Decrypt Resource: arn:aws:kms:undefined:undefined:key/undefined LockitTest1ProdWriteGroup: Type: AWS::IAM::Group Properties: GroupName: LockitTest1ProdWriteGroup Path: /Lockit/ Policies: - PolicyName: LockitTest1ProdWritePolicy PolicyDocument: Version: 2012-10-17 Statement: - Effect: Allow Action: - dynamodb:PutItem Resource: arn:aws:dynamodb:undefined:undefined:table/LockitTest1Prod - Effect: Allow Action: - kms:Encrypt - kms:GenerateDataKey Resource: arn:aws:kms:undefined:undefined:key/undefined LockitTest1Dev: Type: AWS::DynamoDB::Table Properties: TableName: LockitTest1Dev AttributeDefinitions: - AttributeName: SecretName AttributeType: S - AttributeName: Version AttributeType: S KeySchema: - AttributeName: SecretName KeyType: HASH - AttributeName: Version KeyType: RANGE ProvisionedThroughput: ReadCapacityUnits: 5 WriteCapacityUnits: 5 LockitTest1Stg: Type: AWS::DynamoDB::Table Properties: TableName: LockitTest1Stg AttributeDefinitions: - AttributeName: SecretName AttributeType: S - AttributeName: Version AttributeType: S KeySchema: - AttributeName: SecretName KeyType: HASH - AttributeName: Version KeyType: RANGE ProvisionedThroughput: ReadCapacityUnits: 5 WriteCapacityUnits: 5 LockitTest1Prod: Type: AWS::DynamoDB::Table Properties: TableName: LockitTest1Prod AttributeDefinitions: - AttributeName: SecretName AttributeType: S - AttributeName: Version AttributeType: S KeySchema: - AttributeName: SecretName KeyType: HASH - AttributeName: Version KeyType: RANGE ProvisionedThroughput: ReadCapacityUnits: 5 WriteCapacityUnits: 5