Terraform will perform the following actions:

  + module.kemner-ileggelse-s3-bucket.aws_iam_access_key.user_keys
      id:                          <computed>
      encrypted_secret:            <computed>
      key_fingerprint:             <computed>
      secret:                      <computed>
      ses_smtp_password:           <computed>
      status:                      <computed>
      user:                        "user-bym-kemner-test"

  + module.kemner-ileggelse-s3-bucket.aws_iam_user.user
      id:                          <computed>
      arn:                         <computed>
      force_destroy:               "false"
      name:                        "user-bym-kemner-test"
      path:                        "/"
      unique_id:                   <computed>

  + module.kemner-ileggelse-s3-bucket.aws_iam_user_policy.user1-policy
      id:                          <computed>
      name:                        "user-bym-kemner-test-policy"
      policy:                      "{\n  \"Version\": \"2012-10-17\",\n  \"Statement\":\n  [\n    {\n      \"Sid\": \"userpolicy\",\n      \"Effect\": \"Allow\",\n      \"Action\":\n      [\n        \"s3:RestoreObject\",\n
 \"s3:GetBucketLocation\",\n        \"s3:ListBucket\",\n        \"s3:GetObject\",\n        \"s3:GetBucketAcl\",\n        \"s3:PutObject\",\n        \"s3:Put*\",\n        \"s3:DeleteObject\",\n        \"s3:ListAllMyBuckets\"\n
  ],\n      \"Resource\":   [\n          \"${aws_s3_bucket.bucket.arn}\",\n          \"${aws_s3_bucket.bucket.arn}/*\"\n      ]\n    },\n    {\n      \"Effect\": \"Allow\",\n      \"Action\": \"s3:ListAllMyBuckets\",\n      \"Resource\": \"arn:aws:s3:::*\"\n    },\n    {\n      \"Effect\": \"Deny\",\n      \"Action\": \"s3:Create\",\n      \"Resource\":\n        [\n          \"arn:aws:s3:::*\"\n        ]\n    }\n  ]\n}\n"
      user:                        "user-bym-kemner-test"

  + module.kemner-ileggelse-s3-bucket.aws_s3_bucket.bucket
      id:                          <computed>
      acceleration_status:         <computed>
      acl:                         "private"
      arn:                         <computed>
      bucket:                      "bym-kemner-test"
      bucket_domain_name:          <computed>
      bucket_regional_domain_name: <computed>
      force_destroy:               "true"
      hosted_zone_id:              <computed>
      region:                      <computed>
      request_payer:               <computed>
      tags.%:                      "2"
      tags.app:                    "kemner"
      tags.env:                    "test"
      versioning.#:                <computed>
      website_domain:              <computed>
      website_endpoint:            <computed>

  + module.kemner-ileggelse-s3-bucket.aws_s3_bucket_policy.bucket_policy
      id:                          <computed>
      bucket:                      "${aws_s3_bucket.bucket.id}"
      policy:                      "{\n    \"Version\": \"2012-10-17\",\n    \"Statement\":\n    [\n    {\n      \"Effect\": \"Allow\",\n      \"Principal\":\n      {\n        \"AWS\":\n        [\n          \"arn:aws:iam::${var.account_id}:user/${element(aws_iam_user.user.*.name, count.index)}\"\n        ]\n      },\n      \"Action\":\n      [\n        \"s3:PutObject\",\n        \"s3:DeleteObject\",\n        \"s3:GetObject\",\n        \"s3:ListBucket\",\n        \"s3:GetBucketLocation\",\n        \"s3:GetBucketAcl\"\n      ],\n      \"Resource\":\n      [\n        \"${aws_s3_bucket.bucket.arn}\",\n        \"${aws_s3_bucket.bucket.arn}/*\"\n      ]\n    }\n    ]\n  }\n  "


Plan: 5 to add, 0 to change, 0 to destroy.

----------------------------------------