idp-gsuite

DNXLabs/idp-gsuite/aws

Terraform Module HCL AWS ⏱ stale 4y 4mo

Terraform module for setting up IDP authentication with GSuite SAML.

Install

module "idp-gsuite" {

source = "DNXLabs/idp-gsuite/aws"

version = "1.3.1"

}

⭐ Source on GitHub 📦 Registry page

README

terraform-aws-idp-gsuite ![Lint Status](https://github.com/DNXLabs/terraform-aws-idp-gsuite/actions) ![LICENSE](https://github.com/DNXLabs/terraform-aws-idp-gsuite/blob/master/LICENSE) This terraform module sets up an IDP authentication with GSuite SAML. Deploy this module to your IdP account. The following resources will be created: - Identity and Access Management (IAM) role for admin,audit and billing users - Read-Only IAM roles - IAM roles federated to GSuite with SAML - Set Maximum CLIENT/API session duration - The default value is 43200 - Set Gsuite as an IAM SAML provider Usage ``hcl module "idp_account_roles" { source = "git::https://github.com/DNXLabs/terraform-aws-idp-gsuite.git?ref=0.0.2" org_name = "my_organization" } ` Requirements | Name | Version | |------|---------| | terra

Inputs (6)

Name	Type	Description	Default
org_name	string	Name for this organization (slug)	required
metadata	string	Metadata provided by GSuite	required
clients	list(string)	List of clients (external accounts) that this IDP account will allow switching t	`[]`
role_max_session_duration	string	Maximum CLI/API session duration	`"43200"`
client_all_admin_role_names	list(string)	List of admin roles used by clients that this account can assume to	`[]`
extra_roles	list(string)	List of extra roles to create and allow assuming into other accounts	`[]`