Skip to content

Terraform code to manage the creation of AWS Single-Account access apps in Azure Enterprise Apps and EntraID

Notifications You must be signed in to change notification settings

digitalis-io/tf-azure-aws-single-account-access

Repository files navigation

tf-azure-aws-single-account-access

Terraform code to manage the creation of AWS Single-Account access apps in Azure Enterprise Apps and EntraID

Requirements

Name Version
aws ~> 5.10
awscc ~> 0.57.0
azuread 2.44.0
http 3.4.0
random 3.4.2
vault ~> 3.19.0

Providers

Name Version
aws ~> 5.10
azuread 2.44.0
http 3.4.0
random 3.4.2
time n/a
vault ~> 3.19.0

Modules

No modules.

Resources

Name Type
aws_iam_role.aws_admin_group_policy resource
aws_iam_role.aws_read_only_group_policy resource
aws_iam_role_policy_attachment.aws_iam_policy_admin_rights resource
aws_iam_role_policy_attachment.aws_iam_policy_read_only_rights resource
aws_iam_saml_provider.aws_saml_provider resource
azuread_app_role_assignment.azuread_digitalis_admins resource
azuread_app_role_assignment.azuread_read_only_user resource
azuread_application_app_role.azuread_admin_aws_app_role resource
azuread_application_app_role.azuread_aws_app_role resource
azuread_application_from_template.azureas_aws_sso_application_from_template resource
azuread_application_identifier_uri.azuread_aws_sso_application_uri resource
azuread_claims_mapping_policy.azuread_sso_policy resource
azuread_service_principal.azuread_service_principal resource
azuread_service_principal_claims_mapping_policy_assignment.azuread_claims_mapping_policy_assignment resource
azuread_service_principal_token_signing_certificate.azuread_signing_certificate resource
random_uuid.azuread_admin_app_role_id resource
random_uuid.azuread_read_only_app_role_id resource
time_sleep.wait_60_seconds resource
vault_generic_secret.metadata_sso_xml resource
aws_caller_identity.current data source
azuread_application.azuread_aws_sso_application data source
azuread_application_template.azuread_aws_sso_template data source
azuread_client_config.current data source
azuread_group.azuread_admin_group data source
azuread_group.azuread_read_only_group data source
http_http.azure_metadata_xml data source

Inputs

Name Description Type Default Required
account The AWS Account you are working in. Can be a Internal Team Name, Client Name or any Name the is associated with the AWS account. string "account" no
env Environment that the AWS account is part of, Dev, Test, Prod and PreProd are some examples string "Dev" no
region AWS Region string "eu-west-2" no

Outputs

No outputs.

About

Terraform code to manage the creation of AWS Single-Account access apps in Azure Enterprise Apps and EntraID

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages