added terrafrom configs
This commit is contained in:
60
000000000000/iam/users_and_groups/normal_users/main.tf
Normal file
60
000000000000/iam/users_and_groups/normal_users/main.tf
Normal file
@@ -0,0 +1,60 @@
|
||||
terraform {
|
||||
backend "s3" {
|
||||
profile = "terra"
|
||||
bucket = "mytesting-tf-states"
|
||||
key = "000000000000/iam/users_and_groups/normal_users/terraform.tfstate"
|
||||
region = "eu-west-1"
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
locals {
|
||||
normal_users = {
|
||||
"Denys_Platon" = {
|
||||
name = "denys_platon"
|
||||
email = "denys_platon@work.co"
|
||||
},
|
||||
"ivan_petrenko" = {
|
||||
name = "ivan_petrenko"
|
||||
email = "ivan_petrenko@work.co"
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
#######################################
|
||||
### creating group 2 and normal users
|
||||
#######################################
|
||||
|
||||
resource "aws_iam_group" "group_2" {
|
||||
name = "group_2"
|
||||
}
|
||||
|
||||
resource "aws_iam_user" "normal_users" {
|
||||
for_each = local.normal_users
|
||||
|
||||
name = each.key
|
||||
force_destroy = false
|
||||
}
|
||||
|
||||
resource "aws_iam_access_key" "user_access_key" {
|
||||
for_each = local.normal_users
|
||||
user = each.key
|
||||
depends_on = [aws_iam_user.normal_users]
|
||||
}
|
||||
|
||||
resource "aws_iam_user_login_profile" "normal_user" {
|
||||
for_each = local.normal_users
|
||||
user = each.key
|
||||
# password_reset_required = true
|
||||
|
||||
depends_on = [aws_iam_user.normal_users]
|
||||
}
|
||||
|
||||
resource "aws_iam_group_membership" "group_2" {
|
||||
for_each = local.normal_users
|
||||
name = aws_iam_group.group_2.name
|
||||
|
||||
users = [each.key]
|
||||
group = aws_iam_group.group_2.name
|
||||
depends_on = [aws_iam_user_login_profile.normal_user]
|
||||
}
|
||||
11
000000000000/iam/users_and_groups/normal_users/outputs.tf
Normal file
11
000000000000/iam/users_and_groups/normal_users/outputs.tf
Normal file
@@ -0,0 +1,11 @@
|
||||
output "password" {
|
||||
value = {
|
||||
for k, v in local.normal_users : k => {
|
||||
"password" = aws_iam_user_login_profile.normal_user[k].password
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
output "user_group_2_name" {
|
||||
value = aws_iam_group.group_2.name
|
||||
}
|
||||
@@ -0,0 +1,4 @@
|
||||
provider "aws" {
|
||||
region = var.region
|
||||
profile = "terra"
|
||||
}
|
||||
@@ -0,0 +1,7 @@
|
||||
variable "region" {
|
||||
default = "eu-west-1"
|
||||
}
|
||||
|
||||
variable "group_name" {
|
||||
default = "group_2"
|
||||
}
|
||||
Reference in New Issue
Block a user