Skip to content

Latest commit

 

History

History
50 lines (39 loc) · 5.53 KB

TFDOC.md

File metadata and controls

50 lines (39 loc) · 5.53 KB
Raw

Requirements

Name Version
terraform >= 1.4
aws 5.24.0

Providers

Name Version
aws 5.24.0

Modules

No modules.

Resources

Name Type
aws_iam_access_key.user_access_keys resource
aws_iam_account_password_policy.user_password_strict_rule resource
aws_iam_group.user_groups resource
aws_iam_group_policy.user_group_policies resource
aws_iam_user.users resource
aws_iam_user_group_membership.user_groups resource
aws_iam_user_login_profile.user_login_profiles resource
aws_iam_user_ssh_key.user_ssh_keys resource

Inputs

Name Description Type Default Required
group_policies n/a 
list(object({
    name   = string
    group  = string
    policy = any
  }))
 
[
  {
    "group": "guests",
    "name": "guests_policy",
    "policy": {
      "Statement": [
        {
          "Action": [
            "ec2:DescribeInstances"
          ],
          "Condition": {
            "Bool": {
              "aws:MultiFactorAuthPresent": [
                "true"
              ]
            }
          },
          "Effect": "Allow",
          "Resource": ""
        },
        {
          "Action": [
            "s3:ListAllMyBuckets"
          ],
          "Condition": {
            "Bool": {
              "aws:MultiFactorAuthPresent": [
                "true"
              ]
            }
          },
          "Effect": "Allow",
          "Resource": ""
        }
      ],
      "Version": "2012-10-17"
    }
  }
]
 no
groups n/a 
list(object({
    name = string
    path = string
  }))
 
[
  {
    "name": "guests",
    "path": "/guests/"
  }
]
 no
password_policies n/a 
object({
    minimum_password_length        = string
    require_lowercase_characters   = bool
    require_numbers                = bool
    require_uppercase_characters   = bool
    require_symbols                = bool
    allow_users_to_change_password = bool
    max_password_age               = number
    password_reuse_prevention      = number
  })
 
{
  "allow_users_to_change_password": true,
  "max_password_age": 90,
  "minimum_password_length": 16,
  "password_reuse_prevention": 5,
  "require_lowercase_characters": true,
  "require_numbers": true,
  "require_symbols": true,
  "require_uppercase_characters": true
}
 no
users n/a 
list(object({
    username = string
    group    = list(string)
    ssh_keys = object({
      encoding   = string
      public_key = string
      status     = string
    })
  }))
 
[
  {
    "group": [
      "guests"
    ],
    "ssh_keys": {
      "encoding": "SSH",
      "public_key": "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD3F6tyPEFEzV0LX3X8BsXdMsQz1x2cEikKDEY0aIj41qgxMCP/iteneqXSIFZBp5vizPvaoIR3Um9xK7PGoW8giupGn+EPuxIA4cDM4vzOqOkiMPhz5XK0whEjkVzTo4+S0puvDZuwIsdiW9mxhJc7tgBNL0cYlWSYVkz4G/fslNfRPW5mYAM49f4fhtxPb5ok4Q2Lg9dPKVHO/Bgeu5woMc7RY0p1ej6D4CKFE6lymSDJpW0YHX/wqE9+cfEauh7xZcG0q9t2ta6F6fmX0agvpFyZo8aFbXeUBr7osSCJNgvavWbM/06niWrOvYX2xwWdhXmXSrbX8ZbabVohBK41 ridwanbejo@mydomain.com",
      "status": "active"
    },
    "username": "ridwanbejo"
  }
]
 no

Outputs

Name Description
aws_iam_access_key_secret AWS IAM Access Key Secret
aws_iam_user_key_fingerprint AWS IAM User Key Fingerprint
aws_iam_user_password AWS IAM User Password
aws_iam_user_ssh_key_fingerprint AWS IAM User SSH Key Fingerprint
aws_iam_user_ssh_key_public_key AWS IAM User SSH Key Public Key