terraform-aws-idp-gsuite

This terraform module sets up an IDP authentication with GSuite SAML. Deploy this module to your IdP account.

The following resources will be created:

• Identity and Access Management (IAM) role for admin,audit and billing users
• Read-Only IAM roles
• IAM roles federated to GSuite with SAML
• Set Maximum CLIENT/API session duration - The default value is 43200
• Set Gsuite as an IAM SAML provider

Usage

module "idp_account_roles" {
  source   = "git::https://github.com/DNXLabs/terraform-aws-idp-gsuite.git?ref=0.0.2"
  org_name = "my_organization"
}

Requirements

Name	Version
terraform	>= 0.12.0

Providers

Name	Version
aws	n/a

Inputs

Name	Description	Type	Default	Required
client_all_admin_role_names	List of admin roles used by clients that this account can assume to	list(string)	[]	no
clients	List of clients (external accounts) that this IDP account will allow switching to	list(string)	[]	no
extra_roles	List of extra roles to create and allow assuming into other accounts	list(string)	[]	no
metadata	Metadata provided by GSuite	any	n/a	yes
org_name	Name for this organization (slug)	any	n/a	yes
role_max_session_duration	Maximum CLI/API session duration	string	"43200"	no

Outputs

Name	Description
iam_role_admin_arn	ARN for admin IAM role
iam_role_read_only_arn	ARN for read-only IAM role
saml_provider_arn	n/a

Authors

Module managed by DNX Solutions.

License

Apache 2 Licensed. See LICENSE for full details.