Home Verkennen Help
Registreren Inloggen
AFS
/
xdr-terraform-modules
2
0
Vork 0
Bestanden Issues 0 Pull-aanvragen 0 Wiki
Boom: ffc81e90b9
Aftakkingen Labels
xdr-terraform-m...
/
submodules
/
iam
/
standard_iam_policies
Fred Damstra ffc81e90b9 Decouples IAM terraform from the `live` repository 5 jaren geleden
..
README.md ffc81e90b9 Decouples IAM terraform from the `live` repository 5 jaren geleden
datasources.tf ffc81e90b9 Decouples IAM terraform from the `live` repository 5 jaren geleden
locals.tf ffc81e90b9 Decouples IAM terraform from the `live` repository 5 jaren geleden
outputs.tf ffc81e90b9 Decouples IAM terraform from the `live` repository 5 jaren geleden
policy-mdr_engineer.tf ffc81e90b9 Decouples IAM terraform from the `live` repository 5 jaren geleden
policy-mdr_iam_admin.tf ffc81e90b9 Decouples IAM terraform from the `live` repository 5 jaren geleden
policy-mdr_readonly_assumerole.tf ffc81e90b9 Decouples IAM terraform from the `live` repository 5 jaren geleden
policy-mdr_terraformer.tf ffc81e90b9 Decouples IAM terraform from the `live` repository 5 jaren geleden
versions.tf ffc81e90b9 Decouples IAM terraform from the `live` repository 5 jaren geleden

README.md

Standard IAM Policies module

Defines several well-known IAM policies.

Providers

Name Version
aws ~2.0?
okta ?

Inputs

(none)

Policies created

Policy Name Description
mdr_engineer "legacy" policy. Gives effectively PowerUserAccess but with limitations on iam:PassRole and sts:AssumeRole.
iam_admin_kms "legacy" policy. Gives several kms:* actions related to creating, destroying, and managing keys. Encrypt and Decrypt are noticeably absent.
mdr_engineer_readonly_assumerole Read only access to AWS console with ability to escalate to Terraformer role
mdr_terraformer Full read/write access to (almost) everything. Has some limitations around PassRole and AssumeRole