File tree Expand file tree Collapse file tree 5 files changed +37
-13
lines changed Expand file tree Collapse file tree 5 files changed +37
-13
lines changed Original file line number Diff line number Diff line change 1
1
![ Github Actions] ( ../../actions/workflows/terraform.yml/badge.svg )
2
2
3
- # Terraform < NAME >
3
+ # Terraform AWS Appvia Audit Role
4
4
5
5
## Description
6
6
7
- Add a description of the module here
7
+ This module creates a federated AWS IAM role in one or more accounts for the purpose of providing remote audit access
8
+ for Appvia. The module should be deployed from the organization management account or a delegated administrator account.
9
+
10
+ The role is designed as such that it can only be consumed from a coresponding audit role within Appvia's infrastructure
11
+ and when an agreed external ID is in place. Once the audit is complete, this role should be removed, however it will automatically
12
+ block further access after 7 days.
8
13
9
14
## Usage
10
15
11
16
Add example usage here
12
17
13
18
``` hcl
14
19
module "example" {
15
- source = "appvia/<NAME>/aws"
16
- version = "0.0.1"
20
+ source = "appvia/appvia-audit-role/aws"
21
+ version = "1.0.0"
22
+
23
+ external_id = "<random secure id>"
24
+
25
+ deployment_account_ids = [
26
+ "012345678910",
27
+ "102938475632",
28
+ ]
17
29
18
- # insert variables here
30
+ expiry_days = 7
19
31
}
20
32
```
21
33
Original file line number Diff line number Diff line change @@ -12,7 +12,9 @@ No providers.
12
12
13
13
## Modules
14
14
15
- No modules.
15
+ | Name | Source | Version |
16
+ | ------| --------| ---------|
17
+ | <a name =" module_example " ></a > [ example] ( #module\_ example ) | appvia/appvia-audit-role/aws | 1.0.0 |
16
18
17
19
## Resources
18
20
Original file line number Diff line number Diff line change 1
- # ####################################################################################
2
- # Terraform module examples are meant to show an _example_ on how to use a module
3
- # per use-case. The code below should not be copied directly but referenced in order
4
- # to build your own root module that invokes this module
5
- # ####################################################################################
1
+ module "example" {
2
+ source = " appvia/appvia-audit-role/aws"
3
+ version = " 1.0.0"
4
+
5
+ # A secure random string to be used as the role's external ID.
6
+ # This should only be shared between the client and Appvia.
7
+ external_id = " b03e124b514528288a38cb791de17bde"
8
+
9
+ # List of account IDs that the role should be deployed to
10
+ deployment_account_ids = [
11
+ " 012345678910" ,
12
+ " 102938475632" ,
13
+ ]
14
+
15
+ # The number of days after which an account should expire
16
+ expiry_days = 7
17
+ }
Original file line number Diff line number Diff line change 1
-
2
1
provider "aws" {}
Original file line number Diff line number Diff line change 1
-
2
1
terraform {
3
2
required_version = " >= 1.0.0"
4
3
You can’t perform that action at this time.
0 commit comments