borislabs / terraform-aws-transfer Goto Github PK

Support the setting of 'policy' attribute on transfer user. This allows an IAM policy to be set on the user to scope down the permissions applicable on the IAM Role associated with the user.

https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/transfer_user#policy

https://docs.aws.amazon.com/transfer/latest/userguide/users-policies.html

╷
│ Error: Invalid quoted type constraints
│
│ on .terraform\modules\transfer\variables.tf line 13, in variable "tags":
│ 13: type = "map"
│
│ Terraform 0.11 and earlier required type constraints to be given in quotes, but that form is now deprecated and will be removed in a future version of
│ Terraform. Remove the quotes around "map" and write map(string) instead to explicitly indicate that the map elements are strings.
╵

╷
│ Error: Invalid quoted type constraints
│
│ on .terraform\modules\transfer_server\variables.tf line 13, in variable "tags":
│ 13: type = "map"
│
│ Terraform 0.11 and earlier required type constraints to be given in quotes, but that form is now deprecated and will be removed in a future version of
│ Terraform. Remove the quotes around "map" and write map(string) instead to explicitly indicate that the map elements are strings.
╵

╷
│ Error: Invalid quoted type constraints
│
│ on .terraform\modules\user\variables.tf line 13, in variable "tags":
│ 13: type = "map"
│
│ Terraform 0.11 and earlier required type constraints to be given in quotes, but that form is now deprecated and will be removed in a future version of
│ Terraform. Remove the quotes around "map" and write map(string) instead to explicitly indicate that the map elements are strings.
╵

hashicorp/terraform-provider-aws#11632

Following this it is now possible to set a user to restricted mode. This stops the user froim being able to see the name of the bucket or folder of their home directory. It also stops them from being ab;e to traverse outside of the home directory.

No Policy attachment being created for the logging policy onto the logging server role.