-
Notifications
You must be signed in to change notification settings - Fork 17
/
variables.tf
155 lines (131 loc) · 3.96 KB
/
variables.tf
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
#Module : LABEL
#Description : Terraform label module variables
variable "name" {
type = string
default = ""
description = "Name (e.g. `app` or `cluster`)."
}
variable "repository" {
type = string
default = "https://github.com/clouddrove/terraform-aws-iam-user"
description = "Terraform current module repo"
}
variable "environment" {
type = string
default = ""
description = "Environment (e.g. `prod`, `dev`, `staging`)."
}
variable "label_order" {
type = list(any)
default = []
description = "Label order, e.g. `name`,`application`."
}
variable "attributes" {
type = list(any)
default = []
description = "Additional attributes (e.g. `1`)."
}
variable "delimiter" {
type = string
default = "-"
description = "Delimiter to be used between `organization`, `environment`, `name` and `attributes`."
}
variable "tags" {
type = map(any)
default = {}
description = "Additional tags (e.g. map(`BusinessUnit`,`XYZ`)."
}
variable "managedby" {
type = string
default = "hello@clouddrove.com"
description = "ManagedBy, eg 'CloudDrove'"
}
# Module : Iam Role
# Description : Terraform Iam Role module variables.
variable "enabled" {
type = bool
default = true
description = "Whether to create Iam user."
}
variable "force_destroy" {
type = bool
default = false
description = "When destroying this user, destroy even if it has non-Terraform-managed IAM access keys, login profile or MFA devices. Without force_destroy a user with non-Terraform-managed access keys and login profile will fail to be destroyed."
}
variable "path" {
type = string
default = "/"
description = "The path to the role."
}
variable "permissions_boundary" {
type = string
default = ""
description = "The ARN of the policy that is used to set the permissions boundary for the role."
sensitive = true
}
variable "pgp_key" {
type = string
default = ""
description = "Either a base-64 encoded PGP public key, or a keybase username in the form keybase:some_person_that_exists."
sensitive = true
}
variable "status" {
type = string
default = "Active"
description = "The access key status to apply. Defaults to Active. Valid values are Active and Inactive."
}
variable "policy" {
default = null
description = "The policy document."
}
variable "policy_enabled" {
type = bool
default = false
description = "Whether to Attach Iam policy with user."
}
variable "policy_arn" {
type = string
default = ""
description = "The ARN of the policy you want to apply."
sensitive = true
}
variable "groups" {
type = list(string)
default = []
description = "(Optional) List of IAM groups to add the User to."
}
variable "create_user" {
type = bool
default = true
description = "Whether to create the IAM user"
}
variable "create_iam_user_login_profile" {
type = bool
default = true
description = "Whether to create IAM user login profile"
}
variable "password_reset_required" {
type = bool
default = true
description = "Whether the user should be forced to reset the generated password on first login."
}
variable "password_length" {
type = number
default = 20
description = "The length of the generated password"
}
variable "upload_iam_user_ssh_key" {
type = bool
default = false
description = "Whether to upload a public ssh key to the IAM user"
}
variable "ssh_key_encoding" {
type = string
default = "SSH"
description = "Specifies the public key encoding format to use in the response. To retrieve the public key in ssh-rsa format, use SSH. To retrieve the public key in PEM format, use PEM"
}
variable "ssh_public_key" {
type = string
default = ""
description = "The SSH public key. The public key must be encoded in ssh-rsa format or PEM format"
}