medined/create-iam-users-with-terraform-and-keybase

Provides IAM user management with Terraform scripts. Keybase provides security for initial temporary password.

Create IAM Users With Terraform And Keybase

Provides IAM user management with Terraform scripts. Keybase provides security for initial temporary password.

Configuration

• Create the terraform.tfvars file according to your needs. The profile name corresponds to entries in your ~/.aws/credentials file.

cat <<EOF >terraform.tfvars
aws_profile_name = "personal"
region           = "us-east-1"
EOF

• Adjust the contents of iam-groups.tf as needed. This file defines the aws_iam_group, aws_iam_policy and aws_iam_group_policy_attachment associated with IAM and the users you will create.

  • Here is an example of a group definition.

  resource "aws_iam_group" "administrators" {
  name = "administrators"
  path = "/"
}

* Here is an example of a policy definition. I am using pre-defined policies. Custom policies can be used but are a little more involved to define.

data "aws_iam_policy" "AdministratorAccess" {
  arn = "arn:aws:iam::aws:policy/AdministratorAccess"
}

* Here is an examlpe of a group policy attachment. Each policy attached to a group requires its own Terraform resource.

resource "aws_iam_group_policy_attachment" "administrator" {
  group = aws_iam_group.administrators.name
  policy_arn = data.aws_iam_policy.AdministratorAccess.arn
}

• Initialize Terraform.

terraform init

• Apply Terraform using a helper script that ensures a log file is created of all output. Very helpful for validating the application or for debugging when something goes horribly wrong.

./tfa