Skip to content

Latest commit

 

History

History
131 lines (120 loc) · 3.31 KB

README.md

File metadata and controls

131 lines (120 loc) · 3.31 KB
Raw

CloudHealth Technologies Terraform module for CloudHealth IAM Role AWS account provisioning.

This module manages installation of CloudHealth IAM Role in your AWS account.

Inputs

Variable Type Description
external-id String IAM Role External ID assigned in CloudHealth platform
s3-billing-bucket String S3 bucket location for consolidated accounts billing data (optional)
s3-cur-bucket String S3 bucket location for consolidated accounts cost and usage data (optional)
s3-cloudtrail-bucket String S3 bucket location for Cloudtrail data (optional)
s3-config-bucket String S3 bucket location for AWS Config data (optional)
s3-ecs-bucket String S3 bucket location for Elastic Container Service event stream data (optional)
automated-ri-modification-enabled Boolean Additional permissions for enabling automated RI modification (default: false)
automated-actions-enabled Boolean Additional permissions for enabling automated actions (default: false)
additional-policy String Additional policy to associate with IAM Role (optional)

Outputs

Variable Type Description
cloudhealth-role-arn String IAM Role ARN created by the module
external-id String IAM Role External ID assigned in CloudHealth platform
cloudhealth-policy-arn String IAM Policy ARN created by the module

Usage

Obtain your External ID from the CloudHealth platform under new AWS account setup page.

Define invocation of TF module

module "cloudhealth-iam-role" {
    source  = "github.com/CloudHealth/terraform-cloudhealth-iam/role"
    external-id = "1234567890abcdefg"
    s3-billing-bucket = "billing-bucket"
    s3-cloudtrail-bucket = "cloudtrail-bucket"
    automated-ri-modification-enabled = true
    automated-actions-enabled = true
    additional-policy = <<POLICY
{
   "Action": [
     "ec2:CreateTags"
   ],
   "Effect": "Allow",
   "Resource": "*"
}
POLICY
}

NOTE: You can pin a specific Git tagged version of this module using this notation. Here we're pinning to the tag, 0.0.16:

    source  = "git::https://github.com/CloudHealth/terraform-cloudhealth-iam.git//role?ref=tags/0.0.16"

Run terraform plan and apply

terraform plan -target=module.cloudhealth-iam-role
terraform apply -target=module.cloudhealth-iam-role

Get created ARN and External ID to use in CHT portal

terraform output -module=cloudhealth-iam-role

License and Authors

Authors: CloudHealth Team GSD (devops@cloudhealthtech.com)