Files
terraform-foundation/terraform/modules/app-account/outputs.tf
Greg Hendrickson 6136cde9bb feat: Terraform Foundation - AWS Landing Zone
Enterprise-grade multi-tenant AWS cloud foundation.

Modules:
- GitHub OIDC for keyless CI/CD authentication
- IAM account settings and security baseline
- AWS Config Rules for compliance
- ABAC (Attribute-Based Access Control)
- SCPs (Service Control Policies)

Features:
- Multi-account architecture
- Cost optimization patterns
- Security best practices
- Comprehensive documentation

Tech: Terraform, AWS Organizations, IAM Identity Center
2026-02-02 02:57:23 +00:00

50 lines
1.4 KiB
HCL

################################################################################
# App Account - Outputs
################################################################################
output "account_id" {
value = aws_organizations_account.this.id
description = "AWS account ID"
}
output "account_arn" {
value = aws_organizations_account.this.arn
description = "AWS account ARN"
}
output "account_name" {
value = aws_organizations_account.this.name
description = "Account name"
}
output "account_email" {
value = aws_organizations_account.this.email
description = "Account root email"
sensitive = true
}
output "admin_role_arn" {
value = "arn:aws:iam::${aws_organizations_account.this.id}:role/${var.admin_role_name}"
description = "Admin role ARN for cross-account access"
}
output "cross_account_readonly_role_arn" {
value = var.create_cross_account_roles ? aws_iam_role.cross_account_readonly[0].arn : null
description = "Cross-account readonly role ARN"
}
output "cross_account_admin_role_arn" {
value = var.create_cross_account_roles ? aws_iam_role.cross_account_admin[0].arn : null
description = "Cross-account admin role ARN"
}
output "budget_id" {
value = var.budget_limit > 0 ? aws_budgets_budget.this[0].id : null
description = "Budget ID"
}
output "account_tags" {
value = local.account_tags
description = "Account tags"
}