Home Explore Help
Register Sign In
AFS
/
xdr-terraform-modules
2
0
Fork 0
Files Issues 0 Pull Requests 0 Wiki
Tree: ffc81e90b9
Branches Tags
xdr-terraform-m...
/
submodules
/
iam
/
standard_iam_policies
Fred Damstra ffc81e90b9 Decouples IAM terraform from the `live` repository 5 years ago
..
README.md ffc81e90b9 Decouples IAM terraform from the `live` repository 5 years ago
datasources.tf ffc81e90b9 Decouples IAM terraform from the `live` repository 5 years ago
locals.tf ffc81e90b9 Decouples IAM terraform from the `live` repository 5 years ago
outputs.tf ffc81e90b9 Decouples IAM terraform from the `live` repository 5 years ago
policy-mdr_engineer.tf ffc81e90b9 Decouples IAM terraform from the `live` repository 5 years ago
policy-mdr_iam_admin.tf ffc81e90b9 Decouples IAM terraform from the `live` repository 5 years ago
policy-mdr_readonly_assumerole.tf ffc81e90b9 Decouples IAM terraform from the `live` repository 5 years ago
policy-mdr_terraformer.tf ffc81e90b9 Decouples IAM terraform from the `live` repository 5 years ago
versions.tf ffc81e90b9 Decouples IAM terraform from the `live` repository 5 years ago

README.md

Standard IAM Policies module

Defines several well-known IAM policies.

Providers

Name Version
aws ~2.0?
okta ?

Inputs

(none)

Policies created

Policy Name Description
mdr_engineer "legacy" policy. Gives effectively PowerUserAccess but with limitations on iam:PassRole and sts:AssumeRole.
iam_admin_kms "legacy" policy. Gives several kms:* actions related to creating, destroying, and managing keys. Encrypt and Decrypt are noticeably absent.
mdr_engineer_readonly_assumerole Read only access to AWS console with ability to escalate to Terraformer role
mdr_terraformer Full read/write access to (almost) everything. Has some limitations around PassRole and AssumeRole