Skip to content

cloud-security-labs/terraform-aws-sso

 
 

Repository files navigation

terraform-aws-sso

Infrastructure Tests Infrastructure Tests

Assumptions

  • AWS ORG Created
  • AWS SSO Enabled
  • AWS SSO Groups Created

Requirements

Name Version
terraform >= 0.14.0
aws >= 3.24.0

Providers

Name Version
aws >= 3.24.0

Modules

No Modules.

Resources

Name
aws_identitystore_group
aws_organizations_organization
aws_ssoadmin_account_assignment
aws_ssoadmin_instances
aws_ssoadmin_managed_policy_attachment
aws_ssoadmin_permission_set_inline_policy
aws_ssoadmin_permission_set

Inputs

Name Description Type Default Required
account_assignments n/a
list(object(
{
account_id = string
group_display_name = string
}
)
)
n/a yes
description (Optional) The description of the Permission Set. string "" no
inline_policy Inline policy JSON input any n/a yes
managed_policy_arns Managed polices ARNs list(string) n/a yes
name (Required, Forces new resource) The name of the Permission Set. string n/a yes
relay_state (Optional) The relay state URL used to redirect users within the application during the federation authentication process. string null no
session_duration (Optional) The length of time that the application user sessions are valid in the ISO-8601 standard. Default: PT1H. string "PT1H" no
tags (Optional) Key-value map of resource tags. map(string)
{
"Terraform": "Yes"
}
no

Outputs

Name Description
account_ids n/a
account_names n/a
identity_store_id n/a
ssoadmin_instance_arn n/a