This repository contains the Terraform configurations needed to manage a multi-account AWS organization and the various roles that will be used within the accounts.
At Liatrio, we used this as the foundation for our accounts. We created a private fork that contains the actual users and resources used in our accounts.
Related blog post: liatrio.com/blog/secure-aws-account-structure-with-terraform-and-terragrunt
Be sure to modify shared.tfvars to customize for your organization.
- Terraform
- Terragrunt
- Keybase account (only required during initialization to get a secret key for the initial admin user)
See the master folder for initial setup instructions the first time the organization is being created.
Future Terraform runs must be run by an IAM user in the Infosec account with the appropriate group assignment for the target account:
- Infosec account:
InfosecAdminsgroup - Prod account:
ProdAdminsgroup - Non-Prod account:
NonProdAdminsgroup