ecs-task-execution-role
dod-iac/ecs-task-execution-role/aws
An IAM role for use as a ECS task execution role
Usage Creates an IAM role for use as an ECS task execution role. ``hcl module "ecs_task_execution_role" { source = "dod-iac/ecs-task-execution-role/aws" allow_create_log_groups = true cloudwatch_log_group_names = ["*"] name = format("app-%s-task-execution-role-%s", var.application, var.environment) tags = { Application = var.application Environment = var.environment Automation = "Terraform" } } ` Creates an IAM role for use as an ECS task execution role that writes to a specific list of encrypted CloudWatch log groups. `hcl module "cloudwatch_kms_key" { source = "dod-iac/cloudwatch-kms-key/aws" name = format("alias/app-%s-cloudwatch-logs-%s", var.application, var.environment) tags = { Application = var.application Environment = var.environment Automation = "Terraform" } } resource "aws_clo
| Name | Type | Description | Default |
|---|---|---|---|
| cloudwatch_log_group_names | list(string) | List of names of CloudWatch log groups that this task execution role can write t | |
| name | string | The name of the AWS IAM role. | |
| assume_role_policy | string | The assume role policy for the AWS IAM role. If blank, allows ECS tasks in the | "" |
| allow_ecr | bool | Allow instance to pull a container image from an ECR repository. | false |
| policy_description | string | The description of the AWS IAM policy attached to the IAM task execution role. D | "" |
| allow_create_log_groups | bool | Allow role to create CloudWatch log groups. | false |
| policy_document | string | The contents of the AWS IAM policy attached to the IAM task execution role. If | "" |
| policy_name | string | The name of the AWS IAM policy attached to the IAM task execution role. Default | "" |
| tags | map(string) | Tags applied to the AWS IAM role. | {} |
arn — The Amazon Resource Name (ARN) of the AWS IAM Role.name — The name of the AWS IAM Role.Azure landing zones Terraform module
Terraform supermodule for the Terraform platform engineering for Azure
Terraform module to deploy landing zone subscriptions (and much more) in Azure
Terraform Module to define a consistent naming convention by (namespace, stage,