Terraform groups example

groups.tf

#--- administrator_access_prod start---
resource "aws_iam_group" "administrator_access_prod" {
  name = "administrator-access-prod"
  path = "/users/"
}
resource "aws_iam_group_policy" "administrator_access_prod" {
  name  = "administrator-access-prod"
  group = aws_iam_group.administrator_access_prod.id
  policy = <<EOF
  {
  "Version": "2012-10-17",
  "Statement": [
  {
    "Effect": "Allow",
    "Action": [
      "sts:DecodeAuthorizationMessage",
      "sts:GetCallerIdentity"
    ],
    "Resource": "*"
  },
  {
    "Effect": "Allow",
    "Action": "sts:*",
    "Resource": "arn:aws:iam::<PROD_ACCOUNT_ID>:role/administrator-access"
  }
  ]
  }
EOF
}
#--- administrator_access_prod end---