tf-iam-policies-gen's Introduction

tf-iam-policies-gen

Example of use

module "sso_inline_policy_generator" {
    source = "./"

    permissions = [
    {
      name       = "developers"
      statements = [
        {
          effect    = "Allow"
          actions   = [
              "rds:*",
              "ecs:*"
          ]
          resources = concat([
              data.terraform_remote_state.rds.outputs.cluster_arn,
            ],
            data.terraform_remote_state.lb.outputs.alb_private_arns
          )
        },
        {
          effect    = "Deny"
          actions   = [
            "s3:*",
          ]
          resources = [
            aws_s3_bucket.test.arn
          ]
        }
      ]
    },
    {
      name       = "qa"
      statements = [
        {
          effect    = "Allow"
          actions   = [
            "s3:List*",
            "s3:Get*",
          ]
          resources = [
            aws_s3_bucket.test.arn
          ]
        }
      ]
    }
  ]
}

Requirements

Name	Version
terraform	>= 0.13.1
aws	>= 4.0

Providers

Name	Version
aws	>= 4.0

Modules

No modules.

Resources

Name	Type
aws_iam_policy_document.this	data source

Inputs

Name Description Type Default Required

Name	Description	Type	Default	Required
permissions	List of policies that you want to create with the IAM Policy format. Defaults to empty list.	set(object({ name = string statements = set(object({ sid = string effect = string actions = set(string) resources = set(string) condition = set(object({ test = string variable = string values = set(string) })) })) }))	`[]`	no

permissions

List of policies that you want to create with the IAM Policy format. Defaults to empty list.

set(object({
    name       = string
    statements = set(object({
      sid      = string
      effect    = string
      actions   = set(string)
      resources = set(string)
      condition = set(object({
          test = string
          variable = string
          values = set(string)
      }))
    }))
  }))

[]