terraform-aws-lite-account-security

Terraform-aws-lite-account-security is a module that creates IAM roles for federated users to assume from an IdP account.

The following resources will be created:

• Identity and Access Management roles:
  • idp-admin with full admin permissions
  • idp-read-only with read-only permissions
• An alias for this account

In addition you have the options to:

• Set the Maximum CLI/API session duration.
  • The default value is 43200
• Create admin and read-only roles trusting IDP account

Requirements

Name	Version
terraform	>= 0.12.0

Providers

Name	Version
aws	n/a

Inputs

Name	Description	Type	Default	Required
account_alias	Alias for this account	any	n/a	yes
account_name	Name for this account (slug)	any	n/a	yes
extra_roles	A map of <role_name> = to create extra roles in this account	map(string)	{}	no
idp_admin_trust_names	Names for external IDPs for roles (must match idp_trusts)	list(string)	[]	no
idp_admin_trusts	List of role ARNs to trust as external IDPs	list(string)	[]	no
metadata	Metadata provided by GSuite	any	n/a	yes
role_max_session_duration	Maximum CLI/API session duration	string	"43200"	no

Outputs

No output.

Author

Module managed by DNX Solutions.

License

Apache 2 Licensed. See LICENSE for full details.