Added IAM role files for Bank 10

roles/backend.tf

@@ -0,0 +1,17 @@
+resource "aws_iam_role" "backend" {
+  name = "backend-role"
+
+  assume_role_policy = jsonencode({
+    Version = "2012-10-17"
+    Statement = [{
+      Action = "sts:AssumeRole"
+      Effect = "Allow"
+      Principal = { Service = "ec2.amazonaws.com" }
+    }]
+  })
+}
+
+resource "aws_iam_role_policy_attachment" "backend_policy" {
+  role       = aws_iam_role.backend.name
+  policy_arn = "arn:aws:iam::aws:policy/AmazonEC2FullAccess"
+}

roles/devops.tf

@@ -0,0 +1,17 @@
+resource "aws_iam_role" "devops" {
+  name = "devops-role"
+
+  assume_role_policy = jsonencode({
+    Version = "2012-10-17"
+    Statement = [{
+      Action = "sts:AssumeRole"
+      Effect = "Allow"
+      Principal = { Service = "ec2.amazonaws.com" }
+    }]
+  })
+}
+
+resource "aws_iam_role_policy_attachment" "devops_policy" {
+  role       = aws_iam_role.devops.name
+  policy_arn = "arn:aws:iam::aws:policy/PowerUserAccess"
+}

roles/frontend.tf

@@ -0,0 +1,17 @@
+resource "aws_iam_role" "frontend" {
+  name = "frontend-role"
+
+  assume_role_policy = jsonencode({
+    Version = "2012-10-17"
+    Statement = [{
+      Action = "sts:AssumeRole"
+      Effect = "Allow"
+      Principal = { Service = "ec2.amazonaws.com" }
+    }]
+  })
+}
+
+resource "aws_iam_role_policy_attachment" "frontend_policy" {
+  role       = aws_iam_role.frontend.name
+  policy_arn = "arn:aws:iam::aws:policy/AmazonS3FullAccess"
+}

roles/main.tf

@@ -0,0 +1 @@
+# Terraform auto-loads all .tf files in this directory.

roles/provider.tf

@@ -0,0 +1,14 @@
+terraform {
+  required_version = ">= 1.0"
+
+  required_providers {
+    aws = {
+      source  = "hashicorp/aws"
+      version = "~> 5.0"
+    }
+  }
+}
+
+provider "aws" {
+  region = "us-east-1"
+}

roles/readonly.tf

@@ -0,0 +1,17 @@
+resource "aws_iam_role" "readonly" {
+  name = "readonly-role"
+
+  assume_role_policy = jsonencode({
+    Version = "2012-10-17"
+    Statement = [{
+      Action = "sts:AssumeRole"
+      Effect = "Allow"
+      Principal = { Service = "ec2.amazonaws.com" }
+    }]
+  })
+}
+
+resource "aws_iam_role_policy_attachment" "readonly_policy" {
+  role       = aws_iam_role.readonly.name
+  policy_arn = "arn:aws:iam::aws:policy/ReadOnlyAccess"
+}