» flexibleengine_s3_bucket_policy

resource "flexibleengine_s3_bucket" "b" {
  bucket = "my_tf_test_bucket"
}

resource "flexibleengine_s3_bucket_policy" "b" {
  bucket = "${flexibleengine_s3_bucket.b.id}"
  policy =<<POLICY
{
  "Version": "2012-10-17",
  "Id": "MYBUCKETPOLICY",
  "Statement": [
    {
      "Sid": "IPAllow",
      "Effect": "Deny",
      "Principal": "*",
      "Action": "s3:*",
      "Resource": "arn:aws:s3:::my_tf_test_bucket/*",
      "Condition": {
         "IpAddress": {"aws:SourceIp": "8.8.8.8/32"}
      } 
    } 
  ]
}
POLICY
}