diff --git a/modules/iam-group-with-assumable-roles-policy/README.md b/modules/iam-group-with-assumable-roles-policy/README.md index c1e1bd7a..b0671fdc 100644 --- a/modules/iam-group-with-assumable-roles-policy/README.md +++ b/modules/iam-group-with-assumable-roles-policy/README.md @@ -37,6 +37,7 @@ No modules. | [assumable\_roles](#input\_assumable\_roles) | List of IAM roles ARNs which can be assumed by the group | `list(string)` | `[]` | no | | [group\_users](#input\_group\_users) | List of IAM users to have in an IAM group which can assume the role | `list(string)` | `[]` | no | | [name](#input\_name) | Name of IAM policy and IAM group | `string` | n/a | yes | +| [path](#input\_path) | Path of IAM policy and IAM group | `string` | `"/"` | no | | [tags](#input\_tags) | A map of tags to add to all resources. | `map(string)` | `{}` | no | ## Outputs diff --git a/modules/iam-group-with-assumable-roles-policy/main.tf b/modules/iam-group-with-assumable-roles-policy/main.tf index f17e738c..7e550072 100644 --- a/modules/iam-group-with-assumable-roles-policy/main.tf +++ b/modules/iam-group-with-assumable-roles-policy/main.tf @@ -8,6 +8,7 @@ data "aws_iam_policy_document" "assume_role" { resource "aws_iam_policy" "this" { name = var.name + path = var.path description = "Allows to assume role in another AWS account" policy = data.aws_iam_policy_document.assume_role.json @@ -16,6 +17,7 @@ resource "aws_iam_policy" "this" { resource "aws_iam_group" "this" { name = var.name + path = var.path } resource "aws_iam_group_policy_attachment" "this" { diff --git a/modules/iam-group-with-assumable-roles-policy/variables.tf b/modules/iam-group-with-assumable-roles-policy/variables.tf index 3cc3a6d9..b1b2b411 100644 --- a/modules/iam-group-with-assumable-roles-policy/variables.tf +++ b/modules/iam-group-with-assumable-roles-policy/variables.tf @@ -3,6 +3,12 @@ variable "name" { type = string } +variable "path" { + description = "Path of IAM policy and IAM group" + type = string + default = "/" +} + variable "assumable_roles" { description = "List of IAM roles ARNs which can be assumed by the group" type = list(string)