athena-iam-policy

dod-iac/athena-iam-policy/aws

Terraform Module HCL AWS

IAM Policy that allows use of AWS Athena

Install

module "athena-iam-policy" {

source = "dod-iac/athena-iam-policy/aws"

version = "1.0.1"

}

plain text: /constructs/tfmod-dod-iac-athena-iam-policy-aws/install.txt

⭐ Source on GitHub 📦 Registry page

README

Usage Creates an IAM policy that allows use of AWS Athena. ``hcl module "athena_iam_policy" { source = "dod-iac/athena-iam-policy/aws" databases = [aws_glue_catalog_database.main.arn] name = format("%s-athena-user-%s", var.application, var.environment) result_buckets = [aws_s3_bucket.results.arn] require_mfa = true source_buckets = [aws_s3_bucket.source.arn] source_keys = [""] workgroups = [aws_athena_workgroup.main.arn] } ` Terraform Version Terraform 0.13. Pin module version to ~> 1.0.0 . Submit pull-requests to master branch. Terraform 0.11 and 0.12 are not supported. License This project constitutes a work of the United States Government and is not subject to domestic copyright protection under 17 USC § 105. However, because the project utilizes code licensed from contributors and othe

Inputs (9)

Name	Type	Description	Default
require_mfa	string	If true, actions require multi-factor authentication.	required
databases	list(string)	The ARNs of the databases that can be used. Use ["*"] to allow all databases.	required
workgroups	list(string)	The ARNs of the AWS Athena workgroups that can be used. Use ["*"] to allow all	required
source_buckets	list(string)	The ARNs of the AWS S3 buckets that store the source data. Use ["*"] to allow a	required
name	string	The name of the AWS IAM policy.	required
result_buckets	list(string)	The ARNs of the AWS S3 buckets the store the results of the Athena queries. Use	required
source_keys	list(string)	The ARNs of the AWS KMS keys that can be used to decrypt source data files. Use	`[]`
allow_delete_named_query	bool	If true, allows the deletion of named queries.	`false`
description	string	The description of the AWS IAM policy. Defaults to "The policy for [NAME]."	`""`