https://github.com/infraspecdev/terraform-aws-github-actions-iam-role

This repository provides a Terraform module to create an IAM role with the necessary permissions and trust policies for GitHub Actions to manage AWS Organizations resources.
https://github.com/infraspecdev/terraform-aws-github-actions-iam-role

Last synced: 3 days ago
JSON representation

This repository provides a Terraform module to create an IAM role with the necessary permissions and trust policies for GitHub Actions to manage AWS Organizations resources.

• Host: GitHub
• URL: https://github.com/infraspecdev/terraform-aws-github-actions-iam-role
• Owner: infraspecdev
• Created: 2024-05-29T13:34:58.000Z (7 months ago)
• Default Branch: main
• Last Pushed: 2024-06-04T12:52:40.000Z (7 months ago)
• Last Synced: 2024-11-08T09:28:32.818Z (about 2 months ago)
• Language: HCL
• Size: 15.6 KB
• Stars: 0
• Watchers: 3
• Forks: 0
• Open Issues: 2
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

README

        

## Requirements

| Name | Version |

|------|---------|

|  [terraform](#requirement\_terraform) | ~> 1.8.4 |

|  [aws](#requirement\_aws) | ~> 5.51.0 |

## Providers

| Name | Version |

|------|---------|

|  [aws](#provider\_aws) | ~> 5.51.0 |

## Modules

No modules.

## Resources

| Name | Type |

|------|------|

| [aws_iam_openid_connect_provider.github_oidc_connect](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iam_openid_connect_provider) | resource |

| [aws_iam_role.github_actions_role](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iam_role) | resource |

| [aws_iam_role_policy_attachment.attach_admin_policy](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iam_role_policy_attachment) | resource |

| [aws_iam_policy_document.assume_role_policy](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/iam_policy_document) | data source |

## Inputs

| Name | Description | Type | Default | Required |

|------|-------------|------|---------|:--------:|

|  [aws\_account\_id](#input\_aws\_account\_id) | The AWS Account ID | `string` | n/a | yes |

|  [github\_username](#input\_github\_username) | The name of the GitHub user or organization that owns the repository(ies) the role will use. | `string` | n/a | yes |

|  [repository\_names](#input\_repository\_names) | List of names of the GitHub repository that will be allowed to assume the role. | `list(string)` | n/a | yes |

|  [role\_name](#input\_role\_name) | The name of the IAM Role to be created. | `string` | `"GitHubActionsRole"` | no |

## Outputs

| Name | Description |

|------|-------------|

|  [role\_arn](#output\_role\_arn) | The ARN of the IAM role |