refactor: extract iam module to main

Author: rohit-ng

iam.tf

@@ -12,12 +12,20 @@ locals {
     port                 = 5432
   }
 
+
+
   ecs = {
     user_data        = <<EOF
     #!/bin/bash
     echo ECS_CLUSTER=${var.cluster_name} >> /etc/ecs/ecs.config;
     EOF
     ecs_node_sg_name = "kong"
+    iam = {
+      name_prefix           = "kong-ecs-exec"
+      ecs_exec_policy_arn   = ["arn:aws:iam::aws:policy/service-role/AmazonECSTaskExecutionRolePolicy"]
+      principal_type        = "Service"
+      principal_identifiers = ["ecs-tasks.amazonaws.com"]
+    }
   }
 
   kong = {

locals.tf

@@ -177,6 +177,18 @@ module "ecs_task_security_group" {
   tags = local.default_tags
 }
 
+################################################################################
+# ECS Execution IAM Role
+################################################################################
+
+module "ecs_exec_role" {
+  source                = "./modules/iam"
+  name_prefix           = local.ecs.iam.name_prefix
+  principal_type        = local.ecs.iam.principal_type
+  principal_identifiers = local.ecs.iam.principal_identifiers
+  policy_arns           = local.ecs.iam.ecs_exec_policy_arn
+}
+
 ################################################################################
 # ECS Kong
 ################################################################################
@@ -213,7 +225,7 @@ module "ecs_kong" {
     network_mode       = local.kong.network_mode
     cpu                = var.cpu_for_kong_task
     memory             = var.memory_for_kong_task
-    task_role_arn      = module.ecs_task_role.role_arn
+    task_role_arn      = module.ecs_exec_role.role_arn
     execution_role_arn = module.ecs_exec_role.role_arn
 
     container_definitions = [