Skip to content

Commit a020847

Browse files
committed
chore: updated readme and example
1 parent d63097a commit a020847

File tree

5 files changed

+37
-13
lines changed

5 files changed

+37
-13
lines changed

README.md

+17-5
Original file line numberDiff line numberDiff line change
@@ -1,21 +1,33 @@
11
![Github Actions](../../actions/workflows/terraform.yml/badge.svg)
22

3-
# Terraform <NAME>
3+
# Terraform AWS Appvia Audit Role
44

55
## Description
66

7-
Add a description of the module here
7+
This module creates a federated AWS IAM role in one or more accounts for the purpose of providing remote audit access
8+
for Appvia. The module should be deployed from the organization management account or a delegated administrator account.
9+
10+
The role is designed as such that it can only be consumed from a coresponding audit role within Appvia's infrastructure
11+
and when an agreed external ID is in place. Once the audit is complete, this role should be removed, however it will automatically
12+
block further access after 7 days.
813

914
## Usage
1015

1116
Add example usage here
1217

1318
```hcl
1419
module "example" {
15-
source = "appvia/<NAME>/aws"
16-
version = "0.0.1"
20+
source = "appvia/appvia-audit-role/aws"
21+
version = "1.0.0"
22+
23+
external_id = "<random secure id>"
24+
25+
deployment_account_ids = [
26+
"012345678910",
27+
"102938475632",
28+
]
1729
18-
# insert variables here
30+
expiry_days = 7
1931
}
2032
```
2133

examples/basic/README.md

+3-1
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,9 @@ No providers.
1212

1313
## Modules
1414

15-
No modules.
15+
| Name | Source | Version |
16+
|------|--------|---------|
17+
| <a name="module_example"></a> [example](#module\_example) | appvia/appvia-audit-role/aws | 1.0.0 |
1618

1719
## Resources
1820

examples/basic/main.tf

+17-5
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,17 @@
1-
#####################################################################################
2-
# Terraform module examples are meant to show an _example_ on how to use a module
3-
# per use-case. The code below should not be copied directly but referenced in order
4-
# to build your own root module that invokes this module
5-
#####################################################################################
1+
module "example" {
2+
source = "appvia/appvia-audit-role/aws"
3+
version = "1.0.0"
4+
5+
# A secure random string to be used as the role's external ID.
6+
# This should only be shared between the client and Appvia.
7+
external_id = "b03e124b514528288a38cb791de17bde"
8+
9+
# List of account IDs that the role should be deployed to
10+
deployment_account_ids = [
11+
"012345678910",
12+
"102938475632",
13+
]
14+
15+
# The number of days after which an account should expire
16+
expiry_days = 7
17+
}

examples/basic/providers.tf

-1
Original file line numberDiff line numberDiff line change
@@ -1,2 +1 @@
1-
21
provider "aws" {}

examples/basic/terraform.tf

-1
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,3 @@
1-
21
terraform {
32
required_version = ">= 1.0.0"
43

0 commit comments

Comments
 (0)