Skip to content

Latest commit

 

History

History
52 lines (41 loc) · 3.64 KB

README.md

File metadata and controls

52 lines (41 loc) · 3.64 KB

Requirements

Name Version
terraform >= 1.0.3, < 2.0.0
aws >= 3.30.0

Providers

Name Version
aws 5.44.0

Modules

No modules.

Resources

Name Type
aws_iam_role.cookielab_api resource
aws_iam_role.cookielab_console resource
aws_iam_role_policy_attachment.cookielab_api_admin resource
aws_iam_role_policy_attachment.cookielab_api_ro resource
aws_iam_role_policy_attachment.cookielab_console_admin resource
aws_iam_role_policy_attachment.cookielab_console_ro resource
aws_iam_policy_document.cookielab_assume_api data source
aws_iam_policy_document.cookielab_assume_console data source

Inputs

Name Description Type Default Required
administrator ReadOnly or Administrator Access bool false no
assume_from_sso List of objects containing aws_source_account_id, sso_region and sso_permissions_set_name to be allowed to assume console role 
list(object({
    aws_source_account_id    = string
    sso_region               = string
    sso_permissions_set_name = string
  }))
 [] no
destination_role_name_api Role name for API access in destination AWS account string null no
destination_role_name_console Role name for Console access in destination AWS account string null no
destination_role_name_prefix Prefix for role names in destination AWS account string "zzzzz-" no
external_id External ID for link verification string n/a yes
source_role_arn Role ARN in source AWS account string n/a yes

Outputs

Name Description
api_role_arn n/a
api_role_name n/a
console_role_arn n/a
console_role_name n/a