mirror of
https://github.com/ghndrx/terraform-foundation.git
synced 2026-02-10 06:45:06 +00:00
Greg Hendrickson
6136cde9bb
Enterprise-grade multi-tenant AWS cloud foundation. Modules: - GitHub OIDC for keyless CI/CD authentication - IAM account settings and security baseline - AWS Config Rules for compliance - ABAC (Attribute-Based Access Control) - SCPs (Service Control Policies) Features: - Multi-account architecture - Cost optimization patterns - Security best practices - Comprehensive documentation Tech: Terraform, AWS Organizations, IAM Identity Center
50 lines
1.1 KiB
HCL
50 lines
1.1 KiB
HCL
################################################################################
|
|
# RAM Share - Input Variables
|
|
################################################################################
|
|
|
|
variable "name" {
|
|
type = string
|
|
description = "Name of the resource share"
|
|
}
|
|
|
|
variable "resource_arns" {
|
|
type = list(string)
|
|
description = "List of resource ARNs to share"
|
|
}
|
|
|
|
variable "share_with_organization" {
|
|
type = bool
|
|
default = false
|
|
description = "Share with entire organization"
|
|
}
|
|
|
|
variable "principal_ous" {
|
|
type = list(string)
|
|
default = []
|
|
description = "OU ARNs to share with"
|
|
}
|
|
|
|
variable "principal_accounts" {
|
|
type = list(string)
|
|
default = []
|
|
description = "Account IDs to share with"
|
|
}
|
|
|
|
variable "allow_external_principals" {
|
|
type = bool
|
|
default = false
|
|
description = "Allow sharing with external accounts"
|
|
}
|
|
|
|
variable "permission_arns" {
|
|
type = list(string)
|
|
default = null
|
|
description = "Custom RAM permission ARNs"
|
|
}
|
|
|
|
variable "tags" {
|
|
type = map(string)
|
|
default = {}
|
|
description = "Tags to apply to resources"
|
|
}
|