organization-access-group
cloudposse/organization-access-group/aws
Terraform module to create an IAM Group and Policy to grant permissions to delegated IAM users in the Organization's master account to access a member account
[![README Header][readme_header_img]][readme_header_link] [![Cloud Posse][logo]](https://cpco.io/homepage) terraform-aws-organization-access-group    Terraform module to create an IAM Group and Policy to grant permissions to delegated IAM users in the Organization's master account to access a member account https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_access.html --- This project is part of our comprehensive "SweetOps" approach towards DevOps. [ ][share_email] [ ][share_googleplus] [ ][share_facebook] [ ][share_reddit]
| Name | Type | Description | Default |
|---|---|---|---|
| user_names | list | A list of IAM User names to associate with the Group | |
| namespace | string | Namespace (e.g. `cp` or `cloudposse`) | |
| stage | string | Stage (e.g. `prod`, `dev`, `staging`, `infra`) | |
| name | string | Name (e.g. `app` or `cluster`) | |
| enabled | string | Whether to create these resources | "true" |
| delimiter | string | Delimiter to be used between `namespace`, `stage`, `name`, and `attributes` | "-" |
| role_arns | map | A map of alias -> IAM Role ARNs the users in the Group can assume | {} |
| require_mfa | string | Require the users to have MFA enabled | "false" |
| switchrole_url_template | string | URL template for the IAM console to switch to the roles | "https://signin.aws.amazon.com/switchrol |
| attributes | list | Additional attributes (e.g. `1`) | [] |
| tags | map | Additional tags (e.g. map(`BusinessUnit`,`XYZ`) | {} |
policy_id — The policy IDswitchrole_urls — List of URL to the IAM console to switch to the rolesgroup_name — The Group's namegroup_id — The Group's IDgroup_unique_id — Group's unique ID assigned by AWSgroup_arn — The ARN assigned by AWS for the Grouppolicy_name — The name of the policyAzure landing zones Terraform module
Terraform supermodule for the Terraform platform engineering for Azure
Terraform module to deploy landing zone subscriptions (and much more) in Azure
Terraform Module to define a consistent naming convention by (namespace, stage,