Merge branch 'amh-greenhouse-bucket' into 'master'

add datateam-greenhouse-extract bucket

See merge request !819

environments/aws-account/datateam.tf

+data "aws_iam_policy_document" "datateam-greenhouse-extract" {
+  statement {
+    sid = "1"
+
+    actions = [
+      "s3:ListBucket",
+    ]
+
+    principals = {
+      type        = "AWS"
+      identifiers = ["arn:aws:iam::855262394183:user/datateam-greenhouse-extract"]
+    }
+
+    resources = [
+      "${aws_s3_bucket.datateam-greenhouse-extract.arn}",
+    ]
+  }
+
+  statement {
+    sid = "2"
+
+    actions = [
+      "s3:GetObject",
+      "s3:PutObject",
+    ]
+
+    principals = {
+      type        = "AWS"
+      identifiers = ["arn:aws:iam::855262394183:user/datateam-greenhouse-extract"]
+    }
+
+    resources = [
+      "${aws_s3_bucket.datateam-greenhouse-extract.arn}",
+      "${aws_s3_bucket.datateam-greenhouse-extract.arn}/*",
+    ]
+  }
+}
+
+resource "aws_iam_policy" "datateam-greenhouse-extract" {
+  name   = "datateam-greenhouse-extract"
+  path   = "/"
+  policy = "${data.aws_iam_policy_document.datateam-greenhouse-extract.json}"
+}
+
+resource "aws_s3_bucket" "datateam-greenhouse-extract" {
+  bucket = "datateam-greenhouse-extract"
+  acl    = "private"
+}