Terraform Modules for tfaction (AWS resources)
https://suzuki-shunsuke.github.io/tfaction/docs/config/add-working-directory/#aws-iam-role
module "aws" {
source = "github.com/suzuki-shunsuke/terraform-aws-tfaction"
name = "AWS"
repo = "suzuki-shunsuke/tfaction-example"
main_branch = "main"
s3_bucket_tfmigrate_history_name = "<S3 Bucket Name for tfmigrate hisotry>"
s3_bucket_terraform_state_name = "<S3 Bucket Name for terraform state>"
}
# Attach Policies
resource "aws_iam_role_policy_attachment" "terraform_apply_admin" {
role = module.aws.aws_iam_role_terraform_apply_name
policy_arn = "arn:aws:iam::aws:policy/AdministratorAccess"
}
resource "aws_iam_role_policy_attachment" "terraform_plan_readonly" {
role = module.aws.aws_iam_role_terraform_plan_name
policy_arn = "arn:aws:iam::aws:policy/ReadOnlyAccess"
}
resource "aws_iam_role_policy_attachment" "tfmigrate_plan_readonly" {
role = module.aws.aws_iam_role_tfmigrate_plan_name
policy_arn = "arn:aws:iam::aws:policy/ReadOnlyAccess"
}
resource "aws_iam_role_policy_attachment" "tfmigrate_apply_readonly" {
role = module.aws.aws_iam_role_tfmigrate_apply_name
policy_arn = "arn:aws:iam::aws:policy/ReadOnlyAccess"
}
Name | Version |
---|---|
terraform | >= 0.13.1 |
aws | >= 3.63 |
Name | Version |
---|---|
aws | >= 3.63 |
No modules.
Name | Description | Type | Default | Required |
---|---|---|---|---|
assume_role_policy_main_conditions | n/a | list(object({ |
null |
no |
assume_role_policy_pr_conditions | n/a | list(object({ |
null |
no |
create_oidc_provider | n/a | bool |
false |
no |
main_branch | n/a | string |
"main" |
no |
name | n/a | string |
n/a | yes |
repo | n/a | string |
n/a | yes |
s3_bucket_terraform_state_name | n/a | string |
"" |
no |
s3_bucket_tfmigrate_history_name | n/a | string |
n/a | yes |
Name | Description |
---|---|
aws_iam_role_terraform_apply_arn | AWS IAM Role ARN for terraform apply |
aws_iam_role_terraform_apply_name | AWS IAM Role name for terraform apply |
aws_iam_role_terraform_plan_arn | AWS IAM Role ARN for terraform plan |
aws_iam_role_terraform_plan_name | AWS IAM Role name for terraform plan |
aws_iam_role_tfmigrate_apply_arn | AWS IAM Role ARN for tfmigrate apply |
aws_iam_role_tfmigrate_apply_name | AWS IAM Role name for tfmigrate apply |
aws_iam_role_tfmigrate_plan_arn | AWS IAM Role ARN for tfmigrate plan |
aws_iam_role_tfmigrate_plan_name | AWS IAM Role name for tfmigrate plan |
This document is generated by terraform-docs