diff --git a/README.md b/README.md index 9003b25..1762cb1 100644 --- a/README.md +++ b/README.md @@ -10,13 +10,26 @@ Terraform module to create the Drata Autopilot Role in AWS module "drata_autopilot_role" { source = "git::https://github.com/drata/terraform-aws-drata-autopilot-role.git?ref=master" role_sts_externalid = "YOUR_EXTERNAL_ID" +} - # optional - role_name = "DrataReadOnly" # defaults to "DrataAutopilotRole" - role_path = "/external/" # defaults to "/security/" +# this will output the Role ARN +output "drata_autopilot_role" { + value = module.drata_autopilot_role.role_arn } ``` Replace `YOUR_EXTERNAL_ID` with the External ID in the AWS connection panel in Drata +#### The first time you run this, it needs to be initialized + +``` +$ terraform init +``` + +#### Apply the changes + +``` +$ terraform apply +``` + After you apply this terraform, it will output the Role ARN that you can paste into the AWS connection panel in Drata to initiate the connection. diff --git a/variables.tf b/variables.tf index 81625b3..dc250da 100644 --- a/variables.tf +++ b/variables.tf @@ -17,9 +17,9 @@ variable "role_name" { } variable "role_path" { - description = "Path of IAM role" + description = "Path of IAM role (we currently do not support a path other than '/')" type = string - default = "/security/" + default = "/" } variable "role_description" {