updating policy name

Author: chelseyklein

terraform/aws-custom-policies.tf

@@ -1,9 +1,9 @@
 module "aws_custom_policies" {
   source = "./modules/aws-policies"
   policies = {
-    "IAMServicesAdmin" = {
+    "IAMServicesSupervisor" = {
       description = "Policy granting IAM services admins permissions to make changes to user accounts"
-      filename    = "level-4-iam-services-admin-policy.json"
+      filename    = "level-4-iam-services-supervisor-policy.json"
     }
   }
 }

terraform/aws-custom-policies/level-4-iam-services-admin-policy.json

@@ -0,0 +1,38 @@
+{
+    "Statement": [
+        {
+            "Action": [
+                "iam:CreateAccessKey"
+            ],
+            "Effect": "Allow",
+            "Resource": "arn:aws:iam::*:user/*"
+        },
+        {
+            "Action": [
+                "iam:UpdateLoginProfile"
+            ],
+            "Condition": {
+                "StringEquals": {
+                    "iam:ResourceTag/Access Level": [
+                        "1",
+                        "2"
+                    ]
+                }
+            },
+            "Effect": "Allow",
+            "Resource": "arn:aws:iam::*:user/*"
+        },
+        {
+            "Action": [
+                "cloudshell:CreateEnvironment",
+                "cloudshell:GetEnvironmentStatus",
+                "cloudshell:CreateSession",
+                "cloudshell:StartEnvironment",
+                "cloudshell:StopEnvironment"
+            ],
+            "Effect": "Allow",
+            "Resource": "*"
+        }
+    ],
+    "Version": "2012-10-17"
+}

terraform/aws-custom-policies/level-4-iam-services-supervisor-policy.json

@@ -15,7 +15,7 @@ module "iam_services_admin_group" {
 
   group_name = "iam-services-admin-group"
   policy_arn = {
-    "IAMServicesAdmin" = module.aws_custom_policies.policy_arns["IAMServicesAdmin"]
+    "IAMServicesAdmin" = module.aws_custom_policies.policy_arns["IAMServicesSupervisor"]
   }
 }