Ben's Terraform AWS Terraform Backend & Apply Users Module

This is how I do it.

Explore the docs »

Report Bug . Request Feature

About The Project

Ben's Terraform AWS Terraform Backend & Apply Users Module

Usage

TODO

module "context" {
  source    = "bendoerr-terraform-modules/context/null"
  version   = "xxx"
  namespace = "btm"
  role      = "production"
  region    = "us-east-1"
  project   = "core"
}

module "tfuser" {
  source  = "bendoerr-terraform-modules/tfuser/aws"
  version = "xxx"
  context = module.context.shared
}

Cost

There should be no cost associated with this module as it only creates IAM resources which have no cost.

Requirements

Name	Version
terraform	>= 0.13
aws	~> 5.0

Providers

Name	Version
aws	5.30.0

Modules

Name	Source	Version
label_apply	bendoerr-terraform-modules/label/null	0.4.1
label_backend	bendoerr-terraform-modules/label/null	0.4.1
label_backend_dynamodb_rw	bendoerr-terraform-modules/label/null	0.4.1
label_backend_s3_rw	bendoerr-terraform-modules/label/null	0.4.1

Resources

Name	Type
aws_iam_access_key.apply	resource
aws_iam_access_key.backend	resource
aws_iam_policy.apply_1	resource
aws_iam_policy.apply_2	resource
aws_iam_policy.backend_dynamodb_rw	resource
aws_iam_policy.backend_s3_rw	resource
aws_iam_role.apply	resource
aws_iam_role.backend	resource
aws_iam_role_policy_attachment.apply_1	resource
aws_iam_role_policy_attachment.apply_2	resource
aws_iam_role_policy_attachment.backend_dynamodb	resource
aws_iam_role_policy_attachment.backend_s3	resource
aws_iam_user.apply	resource
aws_iam_user.backend	resource
aws_iam_policy_document.apply_1	data source
aws_iam_policy_document.apply_2	data source
aws_iam_policy_document.apply_assume_role	data source
aws_iam_policy_document.backend_assume_role	data source
aws_iam_policy_document.backend_dynamodb_rw	data source
aws_iam_policy_document.backend_s3_rw	data source
aws_iam_role.apply	data source
aws_iam_role.backend	data source
aws_iam_user.apply	data source
aws_iam_user.backend	data source

Inputs

Name	Description	Type	Default	Required
apply_role	n/a	object({ create = bool arn = optional(string) # req, if create is false extra_assume_statements = optional(list(object({ actions = list(string) principals = object({ type = string identifiers = list(string) }) conditions = optional(list(object({ test = string variable = string values = list(string) }))) }))) budgets = optional(bool, false) dynamodb = optional(bool, false) ec2_account = optional(bool, false) ec2_networking = optional(bool, false) ec2_tags = optional(bool, false) ecs = optional(bool, false) efs = optional(bool, false) iam = optional(bool, false) kms = optional(bool, false) lambda = optional(bool, false) logs = optional(bool, false) route53 = optional(bool, false) s3 = optional(bool, false) sns = optional(bool, false) ssm_params = optional(bool, false) })	n/a	yes
apply_user	n/a	object({ create = bool name = optional(string) # req, if create is false or invalid force_destroy = optional(bool) # opt pgp_key = optional(string) # req if create is true or invalid })	n/a	yes
backend_role	n/a	object({ create = bool arn = optional(string) # opt, if create is false extra_assume_statements = optional(list(object({ actions = list(string) principals = object({ type = string identifiers = list(string) }) conditions = optional(list(object({ test = string variable = string values = list(string) }))) }))) dynamodb_policy = optional(object({ create = bool policy_arn = optional(string) # req, if create is false or invalid table_arn = optional(string) # req, if create is true or invalid kms_key = optional(string) # opt, if create is true or invalid }), { create = false }) s3_policy = optional(object({ create = bool policy_arn = optional(string) # req, if create is false or invalid bucket_arn = optional(string) # req, if create is true or invalid kms_key = optional(string) # opt, if create is true or invalid }), { create = false }) })	{ "create": false }	no
backend_user	n/a	object({ create = bool name = optional(string) # req, if create is false or invalid force_destroy = optional(bool) # opt pgp_key = optional(string) # req if create is true or invalid })	{ "create": false }	no
context	Shared Context from Ben's terraform-null-context	object({ attributes = list(string) dns_namespace = string environment = string instance = string instance_short = string namespace = string region = string region_short = string role = string role_short = string project = string tags = map(string) })	n/a	yes

Outputs

Name	Description
apply_role_arn	n/a
apply_role_name	n/a
apply_user_access_key_encrypted_secret	n/a
apply_user_access_key_id	n/a
apply_user_arn	n/a
apply_user_name	n/a
apply_user_unique_id	n/a
backend_dynamodb_rw_policy_arn	n/a
backend_role_arn	n/a
backend_role_name	n/a
backend_s3_rw_policy_arn	n/a
backend_user_access_key_encrypted_secret	n/a
backend_user_access_key_id	n/a
backend_user_arn	n/a
backend_user_name	n/a
backend_user_unique_id	n/a

Roadmap

See the open issues for a list of proposed features (and known issues).

Contributing

Contributions are what make the open source community such an amazing place to be learn, inspire, and create. Any contributions you make are greatly appreciated.

• If you have suggestions for adding or removing projects, feel free to open an issue to discuss it, or directly create a pull request after you edit the README.md file with necessary changes.
• Please make sure you check your spelling and grammar.
• Create individual PR for each suggestion.

Creating A Pull Request

1. Fork the Project
2. Create your Feature Branch (git checkout -b feature/AmazingFeature)
3. Commit your Changes (git commit -m 'Add some AmazingFeature')
4. Push to the Branch (git push origin feature/AmazingFeature)
5. Open a Pull Request

License

Distributed under the MIT License. See LICENSE for more information.

Authors

• Benjamin R. Doerr - Terraformer - Benjamin R. Doerr - Built Ben's Terraform Modules

Supported Versions

Only the latest tagged version is supported.

Reporting a Vulnerability

See SECURITY.md.

Acknowledgements

• ShaanCoding (ReadME Generator)
• OpenSSF - Helping me follow best practices
• StepSecurity - Helping me follow best practices
• Infracost - Better than AWS Calculator