terraform-aws-oidc

🪪 A TF module for AWS IAM OIDC identity providers. 🪪

📜 Usage:

• To install dependencies needed run:

  brew bundle install

• To initialize Terraform in this folder:

  task infra:init

• To update modules and providers in this folder:

  task init -- -upgrade

• To validate the module in this folder:

  task infra:validate

• To plan the infrastructure in this folder:

  task infra:plan

• To plan specific resources of infrastructure in this folder:

  task infra:plan -- -target='cloudflare_record.this'

🆒 Extras:

• To find all the automation available in this folder:

  task --list-all

• To estimate the cost of the infrastructure in this folder:

  task infra:cost

• To update the documentation in this folder:

  task infra:docs

• To lint the Terraform in this folder:

  task infra:lint

• To validate security in this folder:

  task infra:sec

📋 Documentation

Requirements

Name	Version
terraform	~> 1.3
aws	~> 4.40

Providers

Name	Version
aws	4.46.0

Modules

No modules.

Resources

Name	Type
aws_iam_openid_connect_provider.oidc-provider	resource
aws_iam_role.this	resource
aws_iam_role_policy_attachment.administrator-access	resource
aws_iam_role_policy_attachment.custom	resource
aws_iam_role_policy_attachment.read-only	resource
aws_iam_openid_connect_provider.oidc-provider	data source
aws_iam_policy_document.assume-role	data source
aws_partition.current	data source

Inputs

Name	Description	Type	Default	Required
config	The config for creating this module.	object({ attach-admin-policy = optional(bool, false) attach-read-only-policy = optional(bool, true) create-oidc-provider = optional(bool, true) force-detach-policies = optional(bool, false) github-repositories = optional(list(string), []) github-organisation = string oidc-provider-thumbprint-list = optional(list(string), []) oidc-provider-url = optional(string, null) iam-role-name = optional(string, null) iam-role-path = optional(string, "/") iam-role-policy-arns = optional(list(string), []) max-session-duration = optional(number, 3600) oidc-provider-client-list = optional(list(string), []) name = string })	n/a	yes

Outputs

Name	Description
iam-role-name	Name of the IAM role.