resource "aws_iam_policy" "admin" { name = "admin-policy" policy = jsonencode({ Version = "2012-10-17" Statement = [{ Effect = "Allow" Action = "*" Resource = "*" }] }) } resource "aws_iam_role" "app" { name = "app-role" assume_role_policy = jsonencode({ Version = "2012-10-17" Statement = [{ Effect = "Allow" Principal = { Service = "ec2.amazonaws.com" } Action = "sts:AssumeRole" }] }) } resource "aws_iam_role_policy_attachment" "app_admin" { role = aws_iam_role.app.name policy_arn = aws_iam_policy.admin.arn }