Fred Damstra 826dc0b5be Updates Terraform Version Requirements to 0.13		%!s(int64=4) %!d(string=hai) anos
..
README.md	ffc81e90b9 Decouples IAM terraform from the `live` repository	%!s(int64=5) %!d(string=hai) anos
datasources.tf	ffc81e90b9 Decouples IAM terraform from the `live` repository	%!s(int64=5) %!d(string=hai) anos
locals.tf	ffc81e90b9 Decouples IAM terraform from the `live` repository	%!s(int64=5) %!d(string=hai) anos
outputs.tf	ffc81e90b9 Decouples IAM terraform from the `live` repository	%!s(int64=5) %!d(string=hai) anos
policy-mdr_engineer.tf	ffc81e90b9 Decouples IAM terraform from the `live` repository	%!s(int64=5) %!d(string=hai) anos
policy-mdr_iam_admin.tf	ffc81e90b9 Decouples IAM terraform from the `live` repository	%!s(int64=5) %!d(string=hai) anos
policy-mdr_readonly_assumerole.tf	ffc81e90b9 Decouples IAM terraform from the `live` repository	%!s(int64=5) %!d(string=hai) anos
policy-mdr_terraformer.tf	310ac1ea6c [MSOCI-1313] Add codebuild to passrole for terraformer	%!s(int64=5) %!d(string=hai) anos
versions.tf	826dc0b5be Updates Terraform Version Requirements to 0.13	%!s(int64=4) %!d(string=hai) anos

Standard IAM Policies module

Defines several well-known IAM policies.

Providers

Name	Version
aws	~2.0?
okta	?

Inputs

(none)

Policies created

Policy Name	Description
mdr_engineer	"legacy" policy. Gives effectively PowerUserAccess but with limitations on iam:PassRole and sts:AssumeRole.
iam_admin_kms	"legacy" policy. Gives several `kms:*` actions related to creating, destroying, and managing keys. Encrypt and Decrypt are noticeably absent.
mdr_engineer_readonly_assumerole	Read only access to AWS console with ability to escalate to Terraformer role
mdr_terraformer	Full read/write access to (almost) everything. Has some limitations around PassRole and AssumeRole