Skip to content
This repository has been archived by the owner on Sep 29, 2023. It is now read-only.

Terraform code to create a CloudWatch alarm that is triggered when a new user is added.

License

Notifications You must be signed in to change notification settings

cisagov/cool-root-new-user-alarm

Repository files navigation

cool-users-new-user-alarm

GitHub Build Status

This is a Terraform deployment for creating a CloudWatch alarm that is triggered when a new user is created.

Requirements

Name Version
terraform ~> 1.0
aws ~> 3.38

Providers

Name Version
aws ~> 3.38
aws.organizationsreadonly ~> 3.38
aws.usersprovisionaccount ~> 3.38
terraform n/a

Modules

No modules.

Resources

Name Type
aws_cloudwatch_log_metric_filter.new_user resource
aws_cloudwatch_metric_alarm.new_user resource
aws_iam_policy.provisionalarm resource
aws_iam_role_policy_attachment.provisionalarm resource
aws_caller_identity.current data source
aws_iam_policy_document.provisionalarm data source
aws_organizations_organization.cool data source
terraform_remote_state.master data source
terraform_remote_state.users data source

Inputs

Name Description Type Default Required
aws_region The AWS region to deploy into (e.g. us-east-1). string "us-east-1" no
provisionaccount_role_name The name of the IAM role that allows sufficient permissions to provision all AWS resources in the Users account. string "ProvisionAccount" no
provisionalarm_policy_description The description to associate with the IAM policy that allows provisioning of the CloudWatch alarm triggered when a new user is added. string "Allows provisioning of the CloudWatch alarm triggered when a new user is added." no
provisionalarm_policy_name The name to assign the IAM policy that allows provisioning of the CloudWatch alarm triggered when a new user is added. string "ProvisionAlarm" no
tags Tags to apply to all AWS resources created. map(string) {} no

Outputs

Name Description
alarm The CloudWatch alarm that is triggered when a new user is created.
metric_filter The metric filter that feeds the CloudWatch alarm.
policy The policy created to allow creation of the CloudWatch alarm.

Contributing

We welcome contributions! Please see CONTRIBUTING.md for details.

License

This project is in the worldwide public domain.

This project is in the public domain within the United States, and copyright and related rights in the work worldwide are waived through the CC0 1.0 Universal public domain dedication.

All contributions to this project will be released under the CC0 dedication. By submitting a pull request, you are agreeing to comply with this waiver of copyright interest.

About

Terraform code to create a CloudWatch alarm that is triggered when a new user is added.

Resources

License

Security policy

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published