Skip to content

Latest commit

 

History

History

iam-group-with-policies

Folders and files

NameName
Last commit message
Last commit date

parent directory

..
 
 
 
 
 
 
 
 
 
 
 
 

iam-group-with-policies

Creates IAM group with specified IAM policies, and add users into a group.

Requirements

Name Version
terraform >= 1.0
aws >= 4.0

Providers

Name Version
aws >= 4.0

Modules

No modules.

Resources

Name Type
aws_iam_group.this resource
aws_iam_group_membership.this resource
aws_iam_group_policy_attachment.custom resource
aws_iam_group_policy_attachment.custom_arns resource
aws_iam_group_policy_attachment.iam_self_management resource
aws_iam_policy.custom resource
aws_iam_policy.iam_self_management resource
aws_caller_identity.current data source
aws_iam_policy_document.iam_self_management data source
aws_partition.current data source

Inputs

Name Description Type Default Required
attach_iam_self_management_policy Whether to attach IAM policy which allows IAM users to manage their credentials and MFA bool true no
aws_account_id AWS account id to use inside IAM policies. If empty, current AWS account ID will be used. string "" no
create_group Whether to create IAM group bool true no
custom_group_policies List of maps of inline IAM policies to attach to IAM group. Should have name and policy keys in each element. list(map(string)) [] no
custom_group_policy_arns List of IAM policies ARNs to attach to IAM group list(string) [] no
enable_mfa_enforcement Determines whether permissions are added to the policy which requires the groups IAM users to use MFA bool true no
group_users List of IAM users to have in an IAM group which can assume the role list(string) [] no
iam_self_management_policy_name_prefix Name prefix for IAM policy to create with IAM self-management permissions string "IAMSelfManagement-" no
name Name of IAM group string "" no
path Desired path for the IAM group string "/" no
tags A map of tags to add to all resources. map(string) {} no

Outputs

Name Description
aws_account_id IAM AWS account id
group_arn IAM group arn
group_name IAM group name
group_users List of IAM users in IAM group