This Terraform module deploys additional Elastio IAM managed policies that you can use for managing Elastio stacks.
Configure the Elastio terraform module registry, and add this to your project:
module "elastio_policies" {
source = "terraform.cloudsmith.io/public/elastio-iam-policies/aws"
version = "0.33.2"
// Provide input parameters
}Specify the set of names of policies from the list of available policies that you want to deploy as a policies input to the module.
The policies are generated using TypeScript. Their final JSON output is stored as policies/{PolicyName}.json documents in this module's directory. You can see the original policy source code with comments about the reasoning for some IAM permissions if you click on the policy names in the table below.
See the basic usage example.
| Policy | Description |
|---|---|
ElastioAssetAccountDeployer |
Permissions required to deploy the Elastio Asset Account stack |
| Name | Version |
|---|---|
| terraform | ~> 1.0 |
| aws | ~> 5.0 |
| Name | Version |
|---|---|
| aws | ~> 5.0 |
No modules.
| Name | Type |
|---|---|
| aws_iam_policy.this | resource |
| Name | Description | Type | Default | Required |
|---|---|---|---|---|
| name_prefix | A prefix to apply to all resources created by this stack | string |
"" |
no |
| name_suffix | A suffix to apply to all resources created by this stack | string |
"" |
no |
| policies | A set of names of Elastio IAM policies to create. See the available policies in the README of the module. |
set(string) |
n/a | yes |
| tags | Additional tags to apply to all resources created by this stack. | map(string) |
{} |
no |
| Name | Description |
|---|---|
| policies | A map of the created Elastio IAM policies keyed by their names |