ssm-iam-role

cloudposse/ssm-iam-role/aws

Terraform Module HCL AWS

Terraform module to provision an IAM role with configurable permissions to access SSM Parameter Store

Install

module "ssm-iam-role" {

source = "cloudposse/ssm-iam-role/aws"

version = "0.2.0"

}

plain text: /constructs/tfmod-cloudposse-ssm-iam-role-aws/install.txt

⭐ Source on GitHub 📦 Registry page

README

[![README Header][readme_header_img]][readme_header_link] [![Cloud Posse][logo]](https://cpco.io/homepage) terraform-aws-ssm-iam-role ![Build Status](https://travis-ci.org/cloudposse/terraform-aws-ssm-iam-role) ![Latest Release](https://github.com/cloudposse/terraform-aws-ssm-iam-role/releases/latest) ![Slack Community](https://slack.cloudposse.com) Terraform module to provision an IAM role with configurable permissions to access SSM Parameter Store. --- This project is part of our comprehensive "SweetOps" approach towards DevOps. [ ][share_email] [ ][share_googleplus] [ ][share_facebook] [ ][share_reddit] [ ][share_linkedin] [ ][share_twitter] ![Terraform Open Source Modules][terraform_modules] It's 100% Open Source and licensed under the APACHE2. We literally have [hundreds of terraform

Inputs (13)

Name	Type	Description	Default
kms_key_reference	string	The Key ID, Key ARN, Key Alias Name, or Key Alias ARN of the KMS key which will	required
ssm_parameters	list	List of SSM parameters to apply the actions. A parameter can include a path and	required
namespace	string	Namespace (e.g. `cp` or `cloudposse`)	required
stage	string	Stage (e.g. `prod`, `dev`, `staging`)	required
name	string	Name (e.g. `app` or `chamber`)	required
account_id	string	AWS account ID	required
assume_role_arns	list	List of ARNs to allow assuming the role. Could be AWS services or accounts, Kops	required
region	string	AWS Region	required
max_session_duration	string	The maximum session duration (in seconds) for the role. Can have a value from 1	`3600`
ssm_actions	list	SSM actions to allow	`[ "ssm:GetParametersByPath", "ssm:Ge`
delimiter	string	Delimiter to be used between `namespace`, `stage`, `name` and `attributes`	`"-"`
attributes	list	Additional attributes (e.g. `1`)	`[]`
tags	map	Additional tags (e.g. map(`BusinessUnit`,`XYZ`)	`{}`