https://github.com/blackbird-cloud/terraform-aws-ssoadmin

Terraform module for making AWS IAM Center resources
https://github.com/blackbird-cloud/terraform-aws-ssoadmin

aws sso terraform

Last synced: 3 months ago
JSON representation

Terraform module for making AWS IAM Center resources

• Host: GitHub
• URL: https://github.com/blackbird-cloud/terraform-aws-ssoadmin
• Owner: blackbird-cloud
• License: apache-2.0
• Created: 2023-06-20T08:40:06.000Z (over 1 year ago)
• Default Branch: main
• Last Pushed: 2024-09-18T11:51:10.000Z (4 months ago)
• Last Synced: 2024-09-18T16:38:53.644Z (4 months ago)
• Topics: aws, sso, terraform
• Language: HCL
• Homepage:
• Size: 32.2 KB
• Stars: 0
• Watchers: 2
• Forks: 2
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

        

# Terraform Aws Ssoadmin Module

Terraform module for making AWS IAM Center resources

[![blackbird-logo](https://raw.githubusercontent.com/blackbird-cloud/terraform-module-template/main/.config/logo_simple.png)](https://blackbird.cloud)

## Example

```hcl

module "users" {

  source  = "blackbird-cloud/identitystore/aws//modules/users"

  version = "~> 1"

  users = [

    {

      email       = "[email protected]"

      user_name   = "[email protected]"

      given_name  = "John"

      family_name = "Doe"

    },

    {

      email       = "[email protected]"

      user_name   = "[email protected]"

      given_name  = "Jane"

      family_name = "doe"

    }

  ]

}

module "groups" {

  source  = "blackbird-cloud/identitystore/aws//modules/groups"

  version = "~> 1"

  groups = [

    {

      display_name = "Administrators"

      description  = "The Administrators group."

      members = [

        module.users.users["[email protected]"].user_id,

        module.users.users["[email protected]"].user_id

      ]

    }

  ]

}

module "permission_sets" {

  source  = "blackbird-cloud/ssoadmin/aws//modules/permission-sets"

  version = "~> 1"

  permission_sets = [

    {

      name                                = "AdministratorAccess",

      description                         = "AdministratorAccess",

      relay_state                         = "",

      session_duration                    = "PT8H",

      tags                                = {},

      inline_policy                       = "",

      customer_managed_policy_attachments = [],

      policy_attachments                  = ["arn:aws:iam::aws:policy/AdministratorAccess"],

      permissions_boundary_attachment     = []

    },

  ]

}

data "aws_caller_identity" "current" {}

module "account_assignments" {

  source  = "blackbird-cloud/ssoadmin/aws//modules/account-assignments"

  version = "~> 1"

  account_assignments = [

    {

      account             = data.aws_caller_identity.current.account_id

      principal_type      = "GROUP"

      principal_name      = module.groups.groups.Administrators.display_name

      permission_set_arn  = module.permission_sets.permission_sets.AdministratorAccess.arn

      permission_set_name = module.permission_sets.permission_sets.AdministratorAccess.name

    }

  ]

}

```

## Modules

- [Account Assignments](./modules/account-assignments/README.md)

- [Permission Sets](./modules/permission-sets/README.md)

## About

We are [Blackbird Cloud](https://blackbird.cloud), Amsterdam based cloud consultancy, and cloud management service provider. We help companies build secure, cost efficient, and scale-able solutions.

Checkout our other :point\_right: [terraform modules](https://registry.terraform.io/namespaces/blackbird-cloud)

## Copyright

Copyright © 2017-2024 [Blackbird Cloud](https://blackbird.cloud)