https://github.com/jeromegamez/terraform-aws-enforce-mfa

A terraform module to enforce MFA for AWS groups and users
https://github.com/jeromegamez/terraform-aws-enforce-mfa

aws aws-iam hashicorp-terraform mfa terraform terraform-module terraform-modules

Last synced: 3 months ago
JSON representation

A terraform module to enforce MFA for AWS groups and users

• Host: GitHub
• URL: https://github.com/jeromegamez/terraform-aws-enforce-mfa
• Owner: jeromegamez
• License: mit
• Created: 2018-04-19T16:17:50.000Z (almost 7 years ago)
• Default Branch: master
• Last Pushed: 2019-11-22T01:02:18.000Z (about 5 years ago)
• Last Synced: 2024-09-27T18:41:52.406Z (4 months ago)
• Topics: aws, aws-iam, hashicorp-terraform, mfa, terraform, terraform-module, terraform-modules
• Language: HCL
• Homepage: https://registry.terraform.io/modules/jeromegamez/enforce-mfa
• Size: 6.84 KB
• Stars: 24
• Watchers: 4
• Forks: 17
• Open Issues: 1
• Metadata Files:
  • Readme: README.md
  • Changelog: CHANGELOG.md
  • Funding: .github/FUNDING.yml
  • License: LICENSE

Awesome Lists containing this project

README

        
# AWS MFA Terraform module

Terraform module to enforce MFA for AWS groups and users.

This module implements the instructions provided in the AWS Documentation: [Enable Your Users to Configure Their Own Credentials and MFA Settings](https://docs.aws.amazon.com/IAM/latest/UserGuide/tutorial_users-self-manage-mfa-and-creds.html).

This version of the module uses terraform v0.12.x. If you want to use a previous version of terraform please use the [release 1.0.0](https://registry.terraform.io/modules/jeromegamez/enforce-mfa/aws/1.0.0) of this module.

## Usage

```tf

resource "aws_iam_group" "mfa_group" {

  name = "MFAGroup"

}

resource "aws_iam_user" "mfa_user" {

  name = "MFAUser"

}

module "aws-enforce-mfa" {

  source = "jeromegamez/enforce-mfa/aws"

  groups = [aws_iam_group.mfa_group.name]

  users  = [aws_iam_user.mfa_user.name]

}

```

## Module input variables

- `groups` Enforce MFA for the members in these groups (Default: _[]_)

- `users` Enforce MFA for these users (Default: _[]_)

- `allow_password_change_without_mfa` (Default: _false_)

## License

MIT licensed. See LICENSE for full details.