Skip to content

provides an opinionated module to create a namespace based technical role for an AWS account restricted by resources paths, similar permissions to the service account; with the ability to restrict role assumption to corporate networks

License

Notifications You must be signed in to change notification settings

MagusDevOps/terraform-aws-namespace-technical-role

Repository files navigation

terraform-aws-namespace-technical-role

Usage

module "namespace-technical-role" {
  source            = "MagusDevOps/namespace-technical-role/aws"
  version           = "x.x.x"
  account_id        = "${var.account_id}"
  ...
}

Requirements

No requirements.

Providers

The following providers are used by this module:

  • aws

Required Inputs

The following input variables are required:

account_id

Description: AWS account ID

Type: string

namespace

Description: a name that provides a logical grouping of resources

Type: string

prefix

Description: a string that provides a differentiation an environment

Type: string

Optional Inputs

The following input variables are optional (have default values):

additional_tags

Description: A map of additional tags

Type: map

Default: {}

cidr_restrictions

Description: a list of CIDRs that a user can execute this policy from

Type: list

Default:

[
  "0.0.0.0/0"
]

namespace_tag_key

Description: tag key for the namespace variables

Type: string

Default: "namespace"

prefix_tag_key

Description: the prefix tag key defaults to 'environment'

Type: string

Default: "environment"

Outputs

The following outputs are exported:

grant_assumable_policy_arn

role_arn

role_name

group_name

About

provides an opinionated module to create a namespace based technical role for an AWS account restricted by resources paths, similar permissions to the service account; with the ability to restrict role assumption to corporate networks

Topics

Resources

License

Stars

Watchers

Forks

Packages

No packages published

Languages