# IAC - IAM & YAML codes for Reference

To Create EC2 - appspec.yml

```plaintext
Version: 0.0
os:linux
hooks:
	BeforeInstall:
	-location: script/UnzipResource.sh
	-location: script/UnzipData.sh
	AfterInstall:
	-location: script/RunResourceTest.sh
	timeout:3000
	Application Start
	-location: script/RunFunctionTest.sh
	timeout:3000
	ValidateService
	-location: script/MonitorService.sh
	timeout:3000
	runas:codedeployuser
```

To Create ECS - appspec.yml

```plaintext
Version: 0.0
os:linux
hooks:
	BeforeInstall:
	-location: script/UnzipResource.sh
	-location: script/UnzipData.sh
	AfterInstall:
	-location: script/RunResourceTest.sh
	timeout:3000
	Application Start
	-location: script/RunFunctionTest.sh
	timeout:3000
	ValidateService
	-location: script/MonitorService.sh
	timeout:3000
	runas:codedeployuser
```

To Create Lambda - appsec.yml

```plaintext
version0.0
Resources:
- myLambdaFunction:
	Type: AWS::lambda::Function
	Properties:
	Name:JoeLambdafunction
	Aliase:Joe
	CurrentVersion:1
	TargetVersion:2
```

To create Webhook - appspec.yml ( Blue green Deployment )

```plaintext

Version: 0.0
Resources:
...
Hooks
-BeforeAllowTraffic:"ValidateBeforeAllowTraffic"
```

IAM Policy reference

```plaintext
{
	"version":"2025-10-17",
	"statement": [
	{
		"Action":[
			"S3:get*"
			"s3:list*"
			]
			"effect":"Allow",
			"resource":"*"
		}
	]
}
```

IAM role to provide access Secondary account

```plaintext
Artifcat access to secondary account in AWS
{
	"version":"2012-10-17",
	"statement": [
	{
		"Effect":"Allow"
		"Action":[
			"CodeAritifact:List*"
			"CodeAritifact:Get*"
			"CodeAritifact:readfromRepository"
			"CodeAritifact:Describe*"
			],
			"Principal" {
			"AWS":[
			"arn-aws-iam:123456789/root"
			"arn-aws-iam:987654321/user/joe"
			]
			},
			"Resource":"*"
		}
	]
}
```