Creates IAM group with specified IAM policies, and add users into a group.
No modules.
Name |
Description |
Type |
Default |
Required |
attach_iam_self_management_policy |
Whether to attach IAM policy which allows IAM users to manage their credentials and MFA |
bool |
true |
no |
aws_account_id |
AWS account id to use inside IAM policies. If empty, current AWS account ID will be used. |
string |
"" |
no |
create_group |
Whether to create IAM group |
bool |
true |
no |
custom_group_policies |
List of maps of inline IAM policies to attach to IAM group. Should have name and policy keys in each element. |
list(map(string)) |
[] |
no |
custom_group_policy_arns |
List of IAM policies ARNs to attach to IAM group |
list(string) |
[] |
no |
enable_mfa_enforcement |
Determines whether permissions are added to the policy which requires the groups IAM users to use MFA |
bool |
true |
no |
group_users |
List of IAM users to have in an IAM group which can assume the role |
list(string) |
[] |
no |
iam_self_management_policy_name_prefix |
Name prefix for IAM policy to create with IAM self-management permissions |
string |
"IAMSelfManagement-" |
no |
name |
Name of IAM group |
string |
"" |
no |
path |
Desired path for the IAM group |
string |
"/" |
no |
tags |
A map of tags to add to all resources. |
map(string) |
{} |
no |