-
Notifications
You must be signed in to change notification settings - Fork 0
/
iam.tf
27 lines (27 loc) · 1.6 KB
/
iam.tf
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
# Copyright (c) 2020, Oracle and/or its affiliates.
# All rights reserved. The Universal Permissive License (UPL), Version 1.0 as shown at http://oss.oracle.com/licenses/upl
#resource "oci_identity_policy" "requestor_policy" {
# provider = oci.home_region_a
# name = "Local_Peering_Policy"
# description = "Local_Peering_Policy"
# compartment_id = var.tenancy_ocid_a
# statements = ["Define tenancy Acceptor as ${var.tenancy_ocid_b}",
# "Endorse group Administrators to manage local-peering-to in tenancy Acceptor",
# "Endorse group Administrators to associate local-peering-gateways in compartment ${var.compartment_name_a} with local-peering-gateways in tenancy Acceptor",
# "Allow group Administrators to manage local-peering-from in compartment ${var.compartment_name_a}"
# ]
#}
#
#resource "oci_identity_policy" "acceptor_policy" {
# provider = oci.home_region_b
# name = "Local_Peering_Policy"
# description = "Local_Peering_Policy"
# compartment_id = var.tenancy_ocid_b
# statements = ["Define tenancy Requestor as ${var.tenancy_ocid_a}",
# "Define group RequestorGrp as ocid1.group.oc1..aaaaaaaachg2jo6vblnpg7ccujaez6as7tvpviefw33yhygijjkanwpb6fea",
# "Allow group Administrators to manage local-peering-from in compartment ${var.compartment_name_b}",
# "Admit group RequestorGrp of tenancy Requestor to manage local-peering-to in compartment ${var.compartment_name_b}",
# "Admit group RequestorGrp of tenancy Requestor to associate local-peering-gateways in tenancy Requestor with local-peering-gateways in compartment ${var.compartment_name_b}"
# ]
#
#}