mirror of
https://github.com/ghndrx/terraform-foundation.git
synced 2026-02-10 06:45:06 +00:00
Greg Hendrickson
6136cde9bb
Enterprise-grade multi-tenant AWS cloud foundation. Modules: - GitHub OIDC for keyless CI/CD authentication - IAM account settings and security baseline - AWS Config Rules for compliance - ABAC (Attribute-Based Access Control) - SCPs (Service Control Policies) Features: - Multi-account architecture - Cost optimization patterns - Security best practices - Comprehensive documentation Tech: Terraform, AWS Organizations, IAM Identity Center
37 lines
1015 B
HCL
37 lines
1015 B
HCL
################################################################################
|
|
# Identity Center - Input Variables
|
|
################################################################################
|
|
|
|
variable "create_default_permission_sets" {
|
|
type = bool
|
|
default = true
|
|
description = "Create default permission sets (Admin, PowerUser, ReadOnly, Billing)"
|
|
}
|
|
|
|
variable "permission_sets" {
|
|
type = map(object({
|
|
description = string
|
|
session_duration = optional(string, "PT4H")
|
|
managed_policies = optional(list(string), [])
|
|
inline_policy = optional(string, "")
|
|
}))
|
|
default = {}
|
|
description = "Custom permission sets to create"
|
|
}
|
|
|
|
variable "account_assignments" {
|
|
type = list(object({
|
|
group_name = string
|
|
permission_set = string
|
|
account_id = string
|
|
}))
|
|
default = []
|
|
description = "Group to account/permission assignments"
|
|
}
|
|
|
|
variable "tags" {
|
|
type = map(string)
|
|
default = {}
|
|
description = "Tags to apply to resources"
|
|
}
|