aws_iam_role.md

aws_iam_role

back

Index

• Example Usage
• Variables
• Resource
• Outputs

Terraform

terraform {
  required_providers {
    aws = ">= 3.35.0"
  }
}

top

Example Usage

module "aws_iam_role" {
  source = "./modules/aws/r/aws_iam_role"

  # assume_role_policy - (required) is a type of string
  assume_role_policy = null
  # description - (optional) is a type of string
  description = null
  # force_detach_policies - (optional) is a type of bool
  force_detach_policies = null
  # managed_policy_arns - (optional) is a type of set of string
  managed_policy_arns = []
  # max_session_duration - (optional) is a type of number
  max_session_duration = null
  # name - (optional) is a type of string
  name = null
  # name_prefix - (optional) is a type of string
  name_prefix = null
  # path - (optional) is a type of string
  path = null
  # permissions_boundary - (optional) is a type of string
  permissions_boundary = null
  # tags - (optional) is a type of map of string
  tags = {}

  inline_policy = [{
    name   = null
    policy = null
  }]
}

top

Variables

variable "assume_role_policy" {
  description = "(required)"
  type        = string
}

variable "description" {
  description = "(optional)"
  type        = string
  default     = null
}

variable "force_detach_policies" {
  description = "(optional)"
  type        = bool
  default     = null
}

variable "managed_policy_arns" {
  description = "(optional)"
  type        = set(string)
  default     = null
}

variable "max_session_duration" {
  description = "(optional)"
  type        = number
  default     = null
}

variable "name" {
  description = "(optional)"
  type        = string
  default     = null
}

variable "name_prefix" {
  description = "(optional)"
  type        = string
  default     = null
}

variable "path" {
  description = "(optional)"
  type        = string
  default     = null
}

variable "permissions_boundary" {
  description = "(optional)"
  type        = string
  default     = null
}

variable "tags" {
  description = "(optional)"
  type        = map(string)
  default     = null
}

variable "inline_policy" {
  description = "nested block: NestingSet, min items: 0, max items: 0"
  type = set(object(
    {
      name   = string
      policy = string
    }
  ))
  default = []
}

top

Resource

resource "aws_iam_role" "this" {
  # assume_role_policy - (required) is a type of string
  assume_role_policy = var.assume_role_policy
  # description - (optional) is a type of string
  description = var.description
  # force_detach_policies - (optional) is a type of bool
  force_detach_policies = var.force_detach_policies
  # managed_policy_arns - (optional) is a type of set of string
  managed_policy_arns = var.managed_policy_arns
  # max_session_duration - (optional) is a type of number
  max_session_duration = var.max_session_duration
  # name - (optional) is a type of string
  name = var.name
  # name_prefix - (optional) is a type of string
  name_prefix = var.name_prefix
  # path - (optional) is a type of string
  path = var.path
  # permissions_boundary - (optional) is a type of string
  permissions_boundary = var.permissions_boundary
  # tags - (optional) is a type of map of string
  tags = var.tags

  dynamic "inline_policy" {
    for_each = var.inline_policy
    content {
      # name - (optional) is a type of string
      name = inline_policy.value["name"]
      # policy - (optional) is a type of string
      policy = inline_policy.value["policy"]
    }
  }

}

top

Outputs

output "arn" {
  description = "returns a string"
  value       = aws_iam_role.this.arn
}

output "create_date" {
  description = "returns a string"
  value       = aws_iam_role.this.create_date
}

output "id" {
  description = "returns a string"
  value       = aws_iam_role.this.id
}

output "managed_policy_arns" {
  description = "returns a set of string"
  value       = aws_iam_role.this.managed_policy_arns
}

output "name" {
  description = "returns a string"
  value       = aws_iam_role.this.name
}

output "unique_id" {
  description = "returns a string"
  value       = aws_iam_role.this.unique_id
}

output "this" {
  value = aws_iam_role.this
}

top