Skip to content

Latest commit

 

History

History
 
 

iam-baseline

Folders and files

NameName
Last commit message
Last commit date

parent directory

..
 
 
 
 
 
 
 
 
 
 

iam-baseline

Features

  • Set up IAM Password Policy.
  • Create default IAM roles for managing AWS account.

Inputs

Name Description Type Default Required
allow_users_to_change_password Whether to allow users to change their own password. string "true" no
aws_account_id The AWS Account ID number of the account. string n/a yes
manager_iam_role_name The name of the IAM Manager role. string "IAM-Manager" no
manager_iam_role_policy_name The name of the IAM Manager role policy. string "IAM-Manager-Policy" no
master_iam_role_name The name of the IAM Master role. string "IAM-Master" no
master_iam_role_policy_name The name of the IAM Master role policy. string "IAM-Master-Policy" no
max_password_age The number of days that an user password is valid. string "90" no
minimum_password_length Minimum length to require for user passwords. string "14" no
password_reuse_prevention The number of previous passwords that users are prevented from reusing. string "24" no
require_lowercase_characters Whether to require lowercase characters for user passwords. string "true" no
require_numbers Whether to require numbers for user passwords. string "true" no
require_symbols Whether to require symbols for user passwords. string "true" no
require_uppercase_characters Whether to require uppercase characters for user passwords. string "true" no
support_iam_role_name The name of the the support role. string "IAM-Support" no
support_iam_role_policy_name The name of the support role policy. string "IAM-Support-Role" no
support_iam_role_principal_arns List of ARNs of the IAM principal elements by which the support role could be assumed. list n/a yes
tags Specifies object tags key and value. This applies to all resources created by this module. map { "Terraform": true } no

Outputs

Name Description
manager_iam_role The IAM role used for the manager user.
master_iam_role The IAM role used for the master user.
support_iam_role The IAM role used for the support user.