Startsida Utforska Hjälp
Registrera dig Logga in
AFS
/
xdr-terraform-live
2
0
Fork 0
Filer Ärenden 0 Pull-förfrågningar 0 Wiki
Träd: 8e887775f9
Grenar Taggar
xdr-terraform-l...
/
common
/
aws-us-gov
/
afs-mdr-common-services-gov
/
000-mdradmin-bootstrap
Fred Damstra [afs macbook] ac925e94dd Fixes for Updated Terraform 3 år sedan
..
DISABLED 87ac71ad57 Adds support for a "DISABLED" file to skip select modules 4 år sedan
README.md e9366e6600 Merges mdr-common-services and afs-mdr-common-services-gov directories 5 år sedan
common-locals.tf e9366e6600 Merges mdr-common-services and afs-mdr-common-services-gov directories 5 år sedan
main.tf e9366e6600 Merges mdr-common-services and afs-mdr-common-services-gov directories 5 år sedan
provider.tf e9366e6600 Merges mdr-common-services and afs-mdr-common-services-gov directories 5 år sedan
terraform.tfstate e9366e6600 Merges mdr-common-services and afs-mdr-common-services-gov directories 5 år sedan

README.md

README

The CAMRS folks that manage the AFS AWS accounts/organization manage the AWS root account. They create for us a somewhat nerfed user they've been naming "MDRAdmin".

This chunk of terraform adds a policy for MDRAdmin that gives them enough rights to be able to create the S3 bucket for terraform state and the dynamodb table for terraform locking.

This has to be run before state buckets can be created obviously, but I don't expect it to run often. Like, literally during initial account setup and that's probably it.

You'll need working AWS account credentials. Set AWS_PROFILE to the correct profile name. Also, you may want to set AWS_SDK_LOAD_CONFIG=1 in order to make the AWS Golang SDK read $HOME/.aws/config