{"id":21847553,"url":"https://github.com/scribd/terraform-s3-rbac","last_synced_at":"2026-03-17T19:25:54.490Z","repository":{"id":43702382,"uuid":"288843581","full_name":"scribd/terraform-s3-rbac","owner":"scribd","description":"Terraform module to allow users to easily create buckets in their own account and then give access to said buckets via AWS IAM principals","archived":false,"fork":false,"pushed_at":"2023-11-14T13:42:24.000Z","size":18,"stargazers_count":2,"open_issues_count":3,"forks_count":2,"subscribers_count":8,"default_branch":"master","last_synced_at":"2026-01-21T19:36:33.628Z","etag":null,"topics":["core-infrastructure","managed-by-terraform","s3","terraform"],"latest_commit_sha":null,"homepage":"https://github.com/scribd/terraform-s3-rbac","language":"HCL","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/scribd.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":"CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2020-08-19T21:42:07.000Z","updated_at":"2023-01-18T14:28:21.000Z","dependencies_parsed_at":"2025-04-14T13:48:08.344Z","dependency_job_id":"2756c863-85ab-44d7-aa7f-a5908ddacd7d","html_url":"https://github.com/scribd/terraform-s3-rbac","commit_stats":null,"previous_names":[],"tags_count":6,"template":false,"template_full_name":null,"purl":"pkg:github/scribd/terraform-s3-rbac","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/scribd%2Fterraform-s3-rbac","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/scribd%2Fterraform-s3-rbac/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/scribd%2Fterraform-s3-rbac/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/scribd%2Fterraform-s3-rbac/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/scribd","download_url":"https://codeload.github.com/scribd/terraform-s3-rbac/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/scribd%2Fterraform-s3-rbac/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30629249,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-17T17:32:55.572Z","status":"ssl_error","status_checked_at":"2026-03-17T17:32:38.732Z","response_time":56,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["core-infrastructure","managed-by-terraform","s3","terraform"],"created_at":"2024-11-27T23:18:36.259Z","updated_at":"2026-03-17T19:25:54.450Z","avatar_url":"https://github.com/scribd.png","language":"HCL","funding_links":[],"categories":[],"sub_categories":[],"readme":"# terraform-s3-rbac\n\n## Description\n\nThis Terraform module allow users to easily create buckets in their own account and then give access to said buckets via AWS IAM principals.\n\nPrincipals are defined in the AWS docs here: [https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_principal.html](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_principal.html)\n\n#### NOTE\n\nCurrently only `AWS` principals are supported this includes:\n* IAM Users\n* IAM Roles\n* AWS Accounts\n* Assumed-Role Sessions\n\n## Usage\n\n```terraform\nmodule \"s3_rbac\" {\n  source = \"https://github.com:scribd/terraform-s3-rbac.git\"\n\n  role_name              = \"remote_s3_rbac\"\n  s3_bucket_names        = [\"somename-00\", \"somename-01\", \"somename-nn\"]\n  remote_principals_arns = [\"arn:aws:iam::1234567890:user/someuser\", \"arn:aws:iam::1234567890:role/somerole\"]\n  \n  tags = {\"key\": \"value\"}\n}\n```\n\n## Inputs\n\n| Input | Required| Description|\n|-----|------|-----|\n|role_name|yes|The name you want to give to the newly created role|\n|s3_bucket_names|yes|The name(s) of the bucket(s) you would like to create in your AWS account|\n|remote_principals_arns|yes|The ARNs of the principals you wish to let access your buckets. They can be one of: IAM user, IAM Role, AWS Account, or Assumed Role Ression|\n|acl|no|ACL of the S3 bucket(s) you want to create. Default `private`|\n|block_public_acls|no|Defaults to `true`|\n|block_public_policy|no|Defaults to `true`|\n|restrict_public_buckets|no|Defaults to `true`|\n|ignore_public_acls|no|Defaults to `true`|\n\n## Outputs\n\n|Output|Description|\n|----|-----|\n|iam_role_arn|IAM role arn created to be assumed by remote principal(s)|\n|s3_bucket_arns|Your S3 bucket ARNS|\n\n## Contribution\n\nIf you wish to contribute please do the following:\n\n* First create an issue for a new feature, where Scribd will look to review if it is within the scope of this project\n* Ensure your work abides by terraform best practices\n* Choose simplicity over saving a few lines\n* `terraform fmt` and `terraform validate` before opening a PR\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fscribd%2Fterraform-s3-rbac","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fscribd%2Fterraform-s3-rbac","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fscribd%2Fterraform-s3-rbac/lists"}