Skip to content

Commit

Permalink
Merge pull request #2 from awakesecurity/gabriella/format_dhall
Browse files Browse the repository at this point in the history
Format example Dhall expression
  • Loading branch information
baloo authored Nov 30, 2021
2 parents 1ae87a7 + 7486740 commit 523f3d3
Showing 1 changed file with 27 additions and 24 deletions.
51 changes: 27 additions & 24 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -31,37 +31,40 @@ terraform {
```

```dhall
# assets_access.dhall
-- assets_access.dhall
let predicate =
https://raw.githubusercontent.com/mjgpy3/iam-dhall/20bcc9c507d353fb3736a633280239a922b91aa6/policy.dhall

let policy =
https://raw.githubusercontent.com/mjgpy3/iam-dhall/20bcc9c507d353fb3736a633280239a922b91aa6/output.dhall

let Aws : Type = { accountId : Text, region : Text }
let Aws
: Type
= { accountId : Text, region : Text }

{- Grant access to list the objects on a store, and get any object -}
let listGetBucketAccess = \(bucket: Text) ->
[ predicate.serviceAllow
predicate.Service.S3
[ "ListBucket" ]
[ bucket ]
// { sid = "ListObjects" }
, predicate.serviceAllow
predicate.Service.S3
[ "GetObject" ]
[ "${bucket}/*" ]
// { sid = "GetObject" }
]
let listGetBucketAccess =
\(bucket : Text) ->
[ predicate.serviceAllow
predicate.Service.S3
[ "ListBucket" ]
[ bucket ]
// { sid = "ListObjects" }
, predicate.serviceAllow
predicate.Service.S3
[ "GetObject" ]
[ "${bucket}/*" ]
// { sid = "GetObject" }
]

let assetsAccess = \(aws: Aws) ->
policy
aws
(
{- merge access to public-assets and static-assets -}
( listGetBucketAccess "public-assets" )
# ( listGetBucketAccess "static-assets" )
)
let assetsAccess =
\(aws : Aws) ->
policy
aws
( {- merge access to public-assets and static-assets -}
listGetBucketAccess "public-assets"
# listGetBucketAccess "static-assets"
)

in assetsAccess

in assetsAccess
```

0 comments on commit 523f3d3

Please sign in to comment.