added terrafrom configs

This commit is contained in:
2023-11-01 00:02:56 +02:00
parent a4f429eff9
commit f19e926b1a
21 changed files with 407 additions and 0 deletions

View File

@@ -0,0 +1,50 @@
terraform {
backend "s3" {
profile = "terra"
bucket = "mytesting-tf-states"
key = "000000000000/iam/users_and_groups/cli_users/terraform.tfstate"
region = "eu-west-1"
}
}
locals {
cli_users = {
"ci" = {
name = "ci"
email = "ci@home.co"
},
"engine" = {
name = "engine"
email = "ci@home.co"
}
}
}
#######################################
### creating group 1 and service users
#######################################
resource "aws_iam_group" "group_1" {
name = var.group_name
}
resource "aws_iam_user" "cli_users" {
for_each = local.cli_users
name = each.key
force_destroy = false
}
resource "aws_iam_access_key" "user_access_key" {
for_each = local.cli_users
user = each.key
depends_on = [aws_iam_user.cli_users]
}
resource "aws_iam_group_membership" "group_1" {
for_each = local.cli_users
name = aws_iam_group.group_1.name
users = [each.key]
group = aws_iam_group.group_1.name
}

View File

@@ -0,0 +1,13 @@
output "user_access_keys" {
value = {
for k, v in local.cli_users : k => {
"key" = aws_iam_access_key.user_access_key[k].id
"secret" = aws_iam_access_key.user_access_key[k].secret
}
}
sensitive = true
}
output "user_group_1_name" {
value = aws_iam_group.group_1.name
}

View File

@@ -0,0 +1,4 @@
provider "aws" {
region = var.region
profile = "terra"
}

View File

@@ -0,0 +1,9 @@
variable "region" {
type = string
default = "eu-west-1"
}
variable "group_name" {
type = string
default = "group_1"
}