certonid

certonid/certonid/aws

Terraform Module HCL AWS ⏱ stale 3y 0mo

Certonid AWS module for Terraform

Install

module "certonid" {

source = "certonid/certonid/aws"

version = "0.2.0"

}

⭐ Source on GitHub 📦 Registry page

README

Terraform AWS Certonid Module How to generate certonid function with symmetric encryption (not using AWS KMS keys) ``terraform terraform { required_version = ">= 0.12" } provider "aws" { region = "eu-central-1" } provider "archive" {} data "archive_file" "serverless_function" { type = "zip" source_dir = "./serverless/" output_path = "./build/serverless.zip" } module "terraform-aws-certonid-symmetric" { source = "certonid/certonid/aws" function_zip_file = data.archive_file.serverless_function.output_path symmetric_encryption_key = " " clients_names = [ "users name 1", "users name 2" ] } ` Cli config `yml certificates: yourcoolname: public_key_path: ~/.ssh/id_ed25519.pub username: runner: aws valid_until: 2h aws: profile: region: eu-central-1 function_name: CertonidCertificateGenerator ` How

Inputs (15)

Name	Type	Description	Default
function_zip_file	string	Location for certonid serverless archive.	required
function_name	string	AWS lambda function name.	`"CertonidCertificateGenerator"`
function_iam_role_name	string	AWS lambda function IAM role.	`"certonid-lambda-role"`
kmsauth_service_id	string	Kmsauth service ID.	`"certonid"`
clients_iam_policy_name	string	AWS lambda function IAM role.	`"certonid-clients-policy"`
clients_names	set(string)	AWS clients, which attached to `clients_iam_group_name` IAM role to access certo	`[]`
function_iam_general_policy_name	string	AWS lambda function general IAM policy.	`"certonid-lambda-policy"`
function_iam_kms_policy_name	string	AWS lambda function KMS IAM policy.	`"certonid-lambda-kms-policy"`
kmsauth_aws_additional_conditions	string	Kmsauth AWS additional conditions.	`""`
function_handler	string	AWS lambda function handler.	`"serverless"`
symmetric_encryption_key	string	Key, which is used as CERTONID_SYMMETRIC_KEY for certonid.	`""`
is_kmsauth_enabled	bool	Add kmsauth for additional security.	`false`
is_group_for_clients_exists	bool	Is IAM group already created.	`false`
clients_iam_group_name	string	AWS lambda clients IAM group.	`"certonid-clients-role"`
function_iam_kmsauth_policy_name	string	AWS kmsauth lambda function IAM policy.	`"certonid-kmsauth-lambda-policy"`