iam-chamber-user
cloudposse/iam-chamber-user/aws
Terraform module to provision a basic IAM chamber user with access to SSM parameters and KMS key to decrypt secrets, suitable for CI/CD systems (e.g. TravisCI, CircleCI, CodeFresh) or systems which are external to AWS that cannot leverage AWS IAM Instance Profiles
 terraform-aws-iam-chamber-user    Terraform module to provision a basic IAM chamber user with access to SSM parameters and KMS key to decrypt secrets, suitable for CI/CD systems (_e.g._ TravisCI, CircleCI, CodeFresh) or systems which are external to AWS that cannot leverage AWS IAM Instance Profiles. We do not recommend creating IAM users this way for any other purpose. --- This project is part of our comprehensive "SweetOps" approach towards DevOps. It's 100% Open Source and licensed under the APACHE2. Usage ``hcl module "chamber_u
| Name | Type | Description | Default |
|---|---|---|---|
| namespace | string | Namespace (e.g. `cp` or `cloudposse`) | required |
| stage | string | Stage (e.g. `prod`, `dev`, `staging`) | required |
| kms_key_arn | string | ARN of the KMS key which will decrypt secret strings | required |
| name | string | Application or solution name (e.g. `app`) | required |
| delimiter | string | Delimiter to be used between `namespace`, `stage`, `name` and `attributes` | "-" |
| tags | map | Additional tags (e.g. map(`BusinessUnit`,`XYZ`) | {} |
| ssm_resources | list | Resources to apply the actions specified in the policy | [
"*"
] |
| path | string | Path in which to create the user | "/" |
| attributes | list | Additional attributes (e.g. `1`) | [] |
| ssm_actions | list | Actions to allow in the policy | [
"ssm:GetParametersByPath",
"ssm:Ge |
| force_destroy | string | Destroy even if it has non-Terraform-managed IAM access keys, login profiles or | "false" |
| enabled | string | Set to false to prevent the module from creating any resources | "true" |
secret_access_key — The secret access key. This will be written to the state file in plain-textuser_name — Normalized IAM user nameuser_arn — The ARN assigned by AWS for the useruser_unique_id — The user unique ID assigned by AWSaccess_key_id — The access key IDAzure landing zones Terraform module
Terraform supermodule for the Terraform platform engineering for Azure
Terraform module to deploy landing zone subscriptions (and much more) in Azure
Terraform Module to define a consistent naming convention by (namespace, stage,