{"id":21957060,"url":"https://github.com/trussworks/terraform-aws-mfa","last_synced_at":"2025-06-13T06:07:01.664Z","repository":{"id":37021680,"uuid":"198485570","full_name":"trussworks/terraform-aws-mfa","owner":"trussworks","description":"Enforces MFA on an AWS account","archived":false,"fork":false,"pushed_at":"2025-01-18T05:32:20.000Z","size":244,"stargazers_count":14,"open_issues_count":1,"forks_count":9,"subscribers_count":3,"default_branch":"main","last_synced_at":"2025-06-13T06:02:11.477Z","etag":null,"topics":["aws","mfa","terraform","terraform-modules"],"latest_commit_sha":null,"homepage":"https://registry.terraform.io/modules/trussworks/mfa","language":"HCL","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"bsd-3-clause","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/trussworks.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2019-07-23T18:18:13.000Z","updated_at":"2025-01-18T05:32:20.000Z","dependencies_parsed_at":"2024-01-12T00:29:08.033Z","dependency_job_id":"cd83abe4-3280-48f4-a05f-ed4a8707fdca","html_url":"https://github.com/trussworks/terraform-aws-mfa","commit_stats":null,"previous_names":[],"tags_count":9,"template":false,"template_full_name":null,"purl":"pkg:github/trussworks/terraform-aws-mfa","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/trussworks%2Fterraform-aws-mfa","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/trussworks%2Fterraform-aws-mfa/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/trussworks%2Fterraform-aws-mfa/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/trussworks%2Fterraform-aws-mfa/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/trussworks","download_url":"https://codeload.github.com/trussworks/terraform-aws-mfa/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/trussworks%2Fterraform-aws-mfa/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":259592260,"owners_count":22881265,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["aws","mfa","terraform","terraform-modules"],"created_at":"2024-11-29T08:49:11.840Z","updated_at":"2025-06-13T06:07:01.563Z","avatar_url":"https://github.com/trussworks.png","language":"HCL","funding_links":[],"categories":[],"sub_categories":[],"readme":"\u003c!-- markdownlint-disable no-inline-html --\u003e\n\u003c!-- BEGIN_TF_DOCS --\u003e\nConfigures IAM policy to enforce MFA when accessing the AWS API.\n\nThis configured policy also requires users to assume a role for most API calls.\n\nCreates the following resources:\n\n* IAM policy requiring a valid MFA security token for all API calls except those needed for managing a user's own IAM user.\n* IAM group policy attachment for defining which IAM groups to enforce MFA on.\n* IAM user policy attachment for defining which IAM users to enforce MFA on.\n\n## Usage\n\n```hcl\nmodule \"aws_mfa\" {\n  source = \"trussworks/mfa/aws\"\n\n  iam_groups = [\"engineers\"]\n  iam_users  = [\"jill\"]\n}\n```\n\n## Requirements\n\n| Name | Version |\n|------|---------|\n| terraform | \u003e= 1.0 |\n| aws | \u003e= 3 |\n\n## Providers\n\n| Name | Version |\n|------|---------|\n| aws | \u003e= 3 |\n\n## Modules\n\nNo modules.\n\n## Resources\n\n| Name | Type |\n|------|------|\n| [aws_iam_group_policy_attachment.main](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iam_group_policy_attachment) | resource |\n| [aws_iam_policy.main](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iam_policy) | resource |\n| [aws_iam_user_policy_attachment.main](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iam_user_policy_attachment) | resource |\n| [aws_iam_policy_document.main](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/iam_policy_document) | data source |\n| [aws_partition.current](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/partition) | data source |\n\n## Inputs\n\n| Name | Description | Type | Default | Required |\n|------|-------------|------|---------|:--------:|\n| iam\\_groups | List of IAM groups to enforce MFA when accessing the AWS API. | `list(string)` | `[]` | no |\n| iam\\_users | List of IAM users to enforce MFA when accessing the AWS API. | `list(string)` | `[]` | no |\n\n## Outputs\n\nNo outputs.\n\u003c!-- END_TF_DOCS --\u003e\n\n## Developer Setup\n\nInstall dependencies (macOS)\n\n```shell\nbrew install pre-commit go terraform terraform-docs\n```\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ftrussworks%2Fterraform-aws-mfa","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Ftrussworks%2Fterraform-aws-mfa","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ftrussworks%2Fterraform-aws-mfa/lists"}