Skip to main content



Terraform module which creates IAM resources on AWS



create_iam_access_keyWhether to create IAM access keyboolfalse
create_iam_user_login_profileWhether to create IAM user login profileboolfalse
create_userWhether to create the IAM userboolfalse
force_destroyWhen destroying this user, destroy even if it has non-Terraform-managed IAM access keys, login profile or MFA devices. Without force_destroy a user with non-Terraform-managed access keys and login profile will fail to be destroyed.boolfalse
nameDesired name for the IAM userstringtrue
password_lengthThe length of the generated passwordnumberfalse
password_reset_requiredWhether the user should be forced to reset the generated password on first login.boolfalse
pathDesired path for the IAM userstringfalse
permissions_boundaryThe ARN of the policy that is used to set the permissions boundary for the user.stringfalse
pgp_keyEither a base-64 encoded PGP public key, or a keybase username in the form keybase:username. Used to encrypt password and access key.stringfalse
ssh_key_encodingSpecifies the public key encoding format to use in the response. To retrieve the public key in ssh-rsa format, use SSH. To retrieve the public key in PEM format, use PEMstringfalse
ssh_public_keyThe SSH public key. The public key must be encoded in ssh-rsa format or PEM formatstringfalse
tagsA map of tags to add to all
upload_iam_user_ssh_keyWhether to upload a public ssh key to the IAM userboolfalse
writeConnectionSecretToRefThe secret which the cloud resource connection will be written towriteConnectionSecretToReffalse


nameThe secret name which the cloud resource connection will be written tostringtrue
namespaceThe secret namespace which the cloud resource connection will be written tostringfalse