aws-github-oidc

Description

Terraform code for creating an OIDC role for use with actions in a Github org

Requirements

Name	Version
terraform	>= 1.0.0
aws	>= 4.0.0

Providers

Name	Version
aws	>= 4.0.0

Modules

No modules.

Resources

Name	Type
aws_iam_openid_connect_provider.this	resource
aws_iam_role.this	resource
aws_iam_role_policy_attachment.this	resource
aws_caller_identity.current	data source
aws_iam_policy.admin_policy	data source
aws_iam_policy_document.this	data source

Inputs

Name	Description	Type	Default	Required
client_id_list	A list of client IDs (also known as audiences). When a mobile or web app registers with an OpenID Connect provider, they establish a value that identifies the application.	list(string)	[ "sts.amazonaws.com" ]	no
github_org_name	Name of the Github organization.	string	n/a	yes
iam_role_name	Name for the iam role.	string	n/a	yes
provider_url	Url for the iss provider.	string	"https://token.actions.githubusercontent.com"	no
tags	Tags to apply to aws resources.	map(any)	n/a	yes
thumbprint_list	Oidc provider thumbprint list.	list(string)	[ "6938fd4d98bab03faadb97b34396831e3780aea1" ]	no

Outputs

Name	Description
role_name	IAM role name.