ec2_service_assume_role_policy.tf

# ------------------------------------------------------------------------------
# Create an IAM policy document that allows the EC2 AWS service to
# assume a role.
# ------------------------------------------------------------------------------

data "aws_iam_policy_document" "ec2_service_assume_role_doc" {
  statement {
    actions = [
      "sts:AssumeRole",
      "sts:TagSession",
    ]
    effect = "Allow"
    principals {
      identifiers = ["ec2.amazonaws.com", ]
      type        = "Service"
    }
  }
}