iam-assumed-roles
cloudposse/iam-assumed-roles/aws
Terraform Module for Assumed Roles on AWS with IAM Groups Requiring MFA
[![README Header][readme_header_img]][readme_header_link] [![Cloud Posse][logo]](https://cpco.io/homepage) terraform-aws-iam-assumed-roles    Terraform module to provision two IAM roles and two IAM groups for assuming the roles provided MFA is present, and add IAM users to the groups. - Role and group with Administrator (full) access to AWS resources - Role and group with Readonly access to AWS resources To give a user administrator's access, add the user to the admin group. To give a user readonly access, add the user to the readonly group. --- This project is part of
| Name | Type | Description | Default |
|---|---|---|---|
| stage | string | Stage (e.g. `prod`, `dev`, `staging`) | |
| namespace | string | Namespace (e.g. `cp` or `cloudposse`) | |
| attributes | list | Additional attributes (e.g. `policy` or `role`) | [] |
| readonly_name | string | Name for the readonly group and role (e.g. `readonly`) | "readonly" |
| admin_user_names | list | Optional list of IAM user names to add to the admin group | [] |
| switchrole_url | string | URL to the IAM console to switch to a role | "https://signin.aws.amazon.com/switchrol |
| enabled | string | Set to false to prevent the module from creating any resources | "true" |
| tags | map | Additional tags (e.g. map(`BusinessUnit`,`XYZ`) | {} |
| admin_name | string | Name for the admin group and role (e.g. `admin`) | "admin" |
| readonly_user_names | list | Optional list of IAM user names to add to the readonly group | [] |
| delimiter | string | Delimiter to be used between `namespace`, `stage`, `name`, and `attributes` | "-" |
group_admin_name — Admin group namegroup_readonly_id — Readonly group IDgroup_readonly_name — Readonly group namerole_admin_name — Admin role namerole_readonly_arn — Readonly role ARNrole_readonly_name — Readonly role namegroup_admin_id — Admin group IDgroup_admin_arn — Admin group ARNgroup_readonly_arn — Readonly group ARNrole_admin_arn — Admin role ARNswitchrole_admin_url — URL to the IAM console to switch to the admin roleswitchrole_readonly_url — URL to the IAM console to switch to the readonly roleAzure landing zones Terraform module
Terraform supermodule for the Terraform platform engineering for Azure
Terraform module to deploy landing zone subscriptions (and much more) in Azure
Terraform Module to define a consistent naming convention by (namespace, stage,