https://github.com/rpstreef/tf-iam

Terraform AWS IAM module
https://github.com/rpstreef/tf-iam

aws iam iam-policy iam-role terraform terraform-module

Last synced: 1 day ago
JSON representation

Terraform AWS IAM module

• Host: GitHub
• URL: https://github.com/rpstreef/tf-iam
• Owner: rpstreef
• License: apache-2.0
• Created: 2020-02-17T05:28:16.000Z (over 4 years ago)
• Default Branch: master
• Last Pushed: 2021-06-04T06:54:14.000Z (over 3 years ago)
• Last Synced: 2023-12-12T04:29:21.312Z (11 months ago)
• Topics: aws, iam, iam-policy, iam-role, terraform, terraform-module
• Language: HCL
• Size: 9.77 KB
• Stars: 1
• Watchers: 2
• Forks: 4
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

        
# Terraform AWS IAM module

## About:

Basic AWS IAM role and policy module that expects 2 json files (see directory: ```./lambda-policy-example/```):

1) **Assume role policy**, defines the principle service actor. In the example that is Lambda.

2) **Access policy**, defines the policies that determine which services the assumed role has access to.

## How to use:

You can copy the example files in the local module policies directory. To set up variables you can use the ```role_vars``` parameter to pass thm along to the json policy file.

```terraform

module "iam" {

  source = "github.com/rpstreef/tf-iam?ref=v1.2"

  namespace         = var.namespace

  region            = var.region

  resource_tag_name = var.resource_tag_name

  iam_module_enabled = var.iam_module_enabled

  assume_role_policy = file("${path.module}/policies/lambda-assume-role.json")

  template           = file("${path.module}/policies/lambda.json")

  role_name          = "${local.lambda_function_name}-role"

  policy_name        = "${local.lambda_function_name}-policy"

  role_vars = {

    cognito_user_pool_arn = var.cognito_user_pool_arn

  }

}

```

## Changelog

### v1.2

 - Added module on/off switch ``iam_module_enabled``

 - Added tags

### v1.1

 - Added template variables for assume role

### v1.0

 - Initial release