File tree Expand file tree Collapse file tree 5 files changed +37
-13
lines changed
Expand file tree Collapse file tree 5 files changed +37
-13
lines changed Original file line number Diff line number Diff line change 11![ Github Actions] ( ../../actions/workflows/terraform.yml/badge.svg )
22
3- # Terraform < NAME >
3+ # Terraform AWS Appvia Audit Role
44
55## Description
66
7- Add a description of the module here
7+ This module creates a federated AWS IAM role in one or more accounts for the purpose of providing remote audit access
8+ for Appvia. The module should be deployed from the organization management account or a delegated administrator account.
9+
10+ The role is designed as such that it can only be consumed from a coresponding audit role within Appvia's infrastructure
11+ and when an agreed external ID is in place. Once the audit is complete, this role should be removed, however it will automatically
12+ block further access after 7 days.
813
914## Usage
1015
1116Add example usage here
1217
1318``` hcl
1419module "example" {
15- source = "appvia/<NAME>/aws"
16- version = "0.0.1"
20+ source = "appvia/appvia-audit-role/aws"
21+ version = "1.0.0"
22+
23+ external_id = "<random secure id>"
24+
25+ deployment_account_ids = [
26+ "012345678910",
27+ "102938475632",
28+ ]
1729
18- # insert variables here
30+ expiry_days = 7
1931}
2032```
2133
Original file line number Diff line number Diff line change @@ -12,7 +12,9 @@ No providers.
1212
1313## Modules
1414
15- No modules.
15+ | Name | Source | Version |
16+ | ------| --------| ---------|
17+ | <a name =" module_example " ></a > [ example] ( #module\_ example ) | appvia/appvia-audit-role/aws | 1.0.0 |
1618
1719## Resources
1820
Original file line number Diff line number Diff line change 1- # ####################################################################################
2- # Terraform module examples are meant to show an _example_ on how to use a module
3- # per use-case. The code below should not be copied directly but referenced in order
4- # to build your own root module that invokes this module
5- # ####################################################################################
1+ module "example" {
2+ source = " appvia/appvia-audit-role/aws"
3+ version = " 1.0.0"
4+
5+ # A secure random string to be used as the role's external ID.
6+ # This should only be shared between the client and Appvia.
7+ external_id = " b03e124b514528288a38cb791de17bde"
8+
9+ # List of account IDs that the role should be deployed to
10+ deployment_account_ids = [
11+ " 012345678910" ,
12+ " 102938475632" ,
13+ ]
14+
15+ # The number of days after which an account should expire
16+ expiry_days = 7
17+ }
Original file line number Diff line number Diff line change 1-
21provider "aws" {}
Original file line number Diff line number Diff line change 1-
21terraform {
32 required_version = " >= 1.0.0"
43
You can’t perform that action at this time.
0 commit comments