feat(module): initial import

This commit is contained in:
Julien Dessaux 2025-04-10 12:37:36 +02:00
commit a046131bd2
Signed by: adyxax
GPG key ID: F92E51B86E07177E
8 changed files with 415 additions and 0 deletions

27
README.md Normal file
View file

@ -0,0 +1,27 @@
# AWS IAM user
This module creates and manages an IAM user in an AWS account with an IAM access
key. It works conjointly with my [tofu module for IAM
roles](https://git.adyxax.org/adyxax/tofu-module-aws-iam-role).
It provides a default set of policies allowing my Forgejo workflows to run tests
and continuous integration tasks on AWS.
## Usage example
``` hcl
module "aws_iam_user" {
source = "git::ssh://git@git.adyxax.org/adyxax/tofu-module-aws-iam-user?depth=1&ref=1.0.0"
assume_role_account_names = [ "core", "tests" ]
name = local.name
}
```
## Policies
The IAM user is granted the following permissions on the AWS account:
- Assume roles in AWS sub-accounts specified by the
`var.assume_role_account_names` list.
- Manage the repository's own IAM access key.
- Read the user IAM object.