diff --git a/terraform/.terraform.lock.hcl b/terraform/.terraform.lock.hcl index 43c9bb3..3f23cc0 100644 --- a/terraform/.terraform.lock.hcl +++ b/terraform/.terraform.lock.hcl @@ -7,6 +7,7 @@ provider "registry.terraform.io/hashicorp/aws" { hashes = [ "h1:/wtl8WUDUuXhCa2iiZA4Qm2uwo3sAi0zegrHiC7YiJ0=", "h1:2fTLxzUDmp/KVIHbIeLTB4bIzWHx8E6Dw+1ALLUi+Yw=", + "h1:wXARLY+IeQ7ufYxCLTPCwToWGMRvOpiOTfJS97iwUzI=", "zh:07172315d67bc9781240272759cdfc7bd32b7e72384a56862c2c1da3cca99a81", "zh:154ce7d2659de9a59ddfe96d7cab41a9ddc2cb267a7d4bcdf4e737ff2ffdec06", "zh:17324d4335a7a7ac01cc23eded530775606680ff53b47cb74a3cb95d1121f836", @@ -29,6 +30,7 @@ provider "registry.terraform.io/hashicorp/aws" { provider "registry.terraform.io/hashicorp/tls" { version = "4.4.0" hashes = [ + "h1:A6ZfMZY837Dv3fDy7rezqjg9QjoN4B/WU/5ZASbo3Hs=", "h1:isAIo57UnRXCl2oJq/hrSjfPN4wX3DGhSpjFGReHtY0=", "h1:rHsYfTZ0KM0qQgh3csCtjxAWpluRz1m3RH1go4bwfco=", "zh:018b9c5cc84d383597e1ec93bf5ca2cb8be0ba00df7333dddc7b9dc2f4bf4d6c", diff --git a/terraform/README.md b/terraform/README.md index 1f27e9a..05a7973 100644 --- a/terraform/README.md +++ b/terraform/README.md @@ -6,7 +6,7 @@ Resources created by this code repository. ## Modules | Name | Source | Version | -|------|--------|---------| +| ---- | ------ | ------- | | [aws\_custom\_policies](#module\_aws\_custom\_policies) | ./modules/aws-policies | n/a | | [iam\_oidc\_gha\_incubator](#module\_iam\_oidc\_gha\_incubator) | ./modules/aws-gha-oidc-providers | n/a | | [iam\_read\_only\_group](#module\_iam\_read\_only\_group) | ./modules/aws-groups | n/a | @@ -14,13 +14,14 @@ Resources created by this code repository. | [iam\_user\_Sbairamian](#module\_iam\_user\_Sbairamian) | ./modules/aws-users | n/a | | [iam\_user\_alexe](#module\_iam\_user\_alexe) | ./modules/aws-users | n/a | | [iam\_user\_benettonkkb](#module\_iam\_user\_benettonkkb) | ./modules/aws-users | n/a | +| [iam\_user\_herehfla](#module\_iam\_user\_herehfla) | ./modules/aws-users | n/a | | [iam\_user\_rsakuma](#module\_iam\_user\_rsakuma) | ./modules/aws-users | n/a | | [iam\_user\_testiamuser](#module\_iam\_user\_testiamuser) | ./modules/aws-users | n/a | | [iam\_user\_tylerthome](#module\_iam\_user\_tylerthome) | ./modules/aws-users | n/a | ## Resources | Name | Type | -|------|------| +| ---- | ---- | | [aws_cloudtrail.management_events](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/cloudtrail) | resource | | [aws_cloudtrail.tf_backend_logs](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/cloudtrail) | resource | | [aws_iam_group.ops_leads_group](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iam_group) | resource | @@ -47,18 +48,18 @@ Resources created by this code repository. ## Inputs | Name | Description | Type | Default | Required | -|------|-------------|------|---------|:--------:| +| ---- | ----------- | ---- | ------- | :------: | | [iam\_only](#input\_iam\_only) | Manage IAM resources only, skipping the Hack for LA account's CloudTrail trails and log buckets. Set to false for the Hack for LA account. | `bool` | `true` | no | ## Providers | Name | Version | -|------|---------| +| ---- | ------- | | [aws](#provider\_aws) | 6.64.0 | ## Requirements | Name | Version | -|------|---------| +| ---- | ------- | | [terraform](#requirement\_terraform) | ~> 1.16.0 | | [aws](#requirement\_aws) | ~> 6.64.0 | diff --git a/terraform/aws-users.tf b/terraform/aws-users.tf index 36ccf90..4f36123 100644 --- a/terraform/aws-users.tf +++ b/terraform/aws-users.tf @@ -78,3 +78,13 @@ module "iam_user_Sbairamian" { user_groups = ["read-only-group"] } +module "iam_user_herehfla" { + source = "./modules/aws-users" + + user_name = "here.hfla" # Replace with GitHub handle + user_tags = { + "Project" = "devops-security" + "Access Level" = "1" + } + user_groups = ["read-only-group"] +}