/modernisation-platform-terraform-iam-superadmins

Module for creating defined IAM users as superadmins • This repository is defined and managed in Terraform

Primary LanguageHCLMIT LicenseMIT

Modernisation Platform Terraform IAM Superadmins Module

Standards Icon Format Code Icon Scorecards IconSCA Icon Terraform SCA Icon

This repository holds a Terraform module that creates set IAM accounts and associated configuration, such as: account password policies, administrator groups, user accounts.

Usage

module "iam" {
  source        = "github.com/ministryofjustice/modernisation-platform-terraform-iam-superadmins"
  account_alias = "aws-account-alias"
}

Inputs

Name Description Type Default Required
account_alias AWS IAM account alias for this account string n/a yes

Outputs

Name Description Sensitive
superadmin_passwords PGP-encrypted passwords for IAM users, if a pgp_key is specified no

First-sign in and changing a password

The included force_mfa IAM policy doesn't allow a user to change their password without MFA enabled. When onboarding a new superadmin, they will need to configure MFA before logging in for the first time.

Looking for issues?

If you're looking to raise an issue with this module, please create a new issue in the Modernisation Platform repository.