/terraform-aws-identitystore

This module handles creation of AWS SSO identity groups and users

Primary LanguageHCLMIT LicenseMIT

terraform-aws-identitystore

This module handles creation of AWS SSO identity groups and users

Usage

module "aws_identitystore" {
  source = "git::https://github.com/avlcloudtechnologies/terraform-aws-config.git?ref=v0.1.0

  sso_groups = {
    admins = {
      description = "Group with Administrator access to all accounts excluding Management account"
    },
    developers = {
      description = "Group for developers"
    }

  sso_users = {
    jane = {
      display_name = "Jane Doe"
      given_name   = "Jane"
      family_name  = "Doe"
      sso_groups   = ["admins"]
    },
    john = {
      display_name = "John Doe"
      given_name   = "John"
      family_name  = "Doe"
      sso_groups   = ["developers"]
    }
  }
}

Requirements

Name Version
terraform >= 1.3.0
aws ~> 4.33

Providers

Name Version
aws ~> 4.33

Modules

No modules.

Resources

Name Type
aws_identitystore_group.this resource
aws_identitystore_group_membership.this resource
aws_identitystore_user.this resource
aws_ssoadmin_instances.this data source

Inputs

Name Description Type Default Required
sso_groups A map of AWS SSO groups 
map(object({
    description = optional(string)
  }))
 n/a yes
sso_users A map of AWS SSO users 
map(object({
    display_name       = string
    given_name         = string
    family_name        = string
    sso_groups         = list(string)
    locale             = optional(string)
    nickname           = optional(string)
    preferred_language = optional(string)
    profile_url        = optional(string)
    timezone           = optional(string)
    title              = optional(string)
    user_type          = optional(string)
    emails = optional(list(object({
      value   = optional(string)
      primary = optional(bool, true)
      type    = optional(string)
    })), []),
    addresses = optional(list(object({
      country        = optional(string)
      formatted      = optional(string)
      locality       = optional(string)
      postal_code    = optional(string)
      primary        = optional(bool, true)
      region         = optional(string)
      street_address = optional(string)
      type           = optional(string)
    })), []),
    phone_numbers = optional(list(object({
      value   = optional(string)
      primary = optional(bool, true)
      type    = optional(string)
    })), [])
  }))
 n/a yes

Outputs

Name Description
groups All attributes of the newly created AWS SSO groups in the identity store.
users All attributes of the newly created AWS SSO users in the identity store.