base-module

AntonAleksandrov13/base-module/aws

Terraform Module HCL AWS

This repository contains base configurations for running terraform in AWS. It provisions base IAM user/role with minimum required policies, S3 bucket for state storage and Dynamodb for locking

Install

module "base-module" {

source = "AntonAleksandrov13/base-module/aws"

version = "1.0.0"

}

plain text: /constructs/tfmod-antonaleksandrov13-base-module-aws/install.txt

⭐ Source on GitHub 📦 Registry page

README

terraform-aws-base-module This repository contains a set of AWS resources required for state storing and locking. Using this module, you can create all necessary resources to get started with remote state in AWS S3. What does it deploy? This module deploys: 1. AWS IAM role 2. AWS IAM policy for S3 access based on Terraform documentation 3. AWS IAM policy for DynamoDB access based on Terraform documentation 4. S3 bucket for remote state storage 5. DynamoDB table for state locking Implementation Run this module first to create all necessary resources for working with AWS and then proceed with your infrastructure. ``terraform variable "region" { default = "eu-central-1" } provider "aws" { region = var.region } terraform { required_providers { aws = ">= 3.22.0" } } module "base-module" { sourc

Inputs (10)

Name	Type	Description	Default
user_name	string	AWS IAM user name which can assume role. Does nothing without allow_user_assume_	`"some_user_name"`
allow_user_assume_on_role	bool	Allows to an AWS IAM user to assume the newly created IAM role. See user_name va	`false`
additional_policies_arn	list(string)	List of AWS IAM policy arns that will be attached to the newly created IAM role.	`[]`
create_base_role	bool	Boolean determines whether to create a new IAM role. Note: only S3 and DynamoDB	`false`
role_name	string	The name of a new IAM role.	`"terraform"`
generate_bucket_name	bool	Boolean determines whether to generate S3 bucket name. If enabled, S3 bucket wil	`true`
state_bucket_name_override	string	Overrides the generated S3 bucket name	`"my-very-unique-terraform-state-eu-centr`
s3_state_key_path	string	S3 prefix used in IAM policy for S3 access. Determines which prefix can be read	`"/*"`
generate_lock_table_name	bool	Boolean determines whether to generate DynamoDB table name. If enabled, the tabl	`true`
lock_table_name_override	string	Overrides the generated DynamoDB table name.	`"terraform-state-lock"`