terraform.aws-baseline-infra/modules/security_identity_compliance/iam-role/variables.tf

38 lines
939 B
HCL

variable "create-instance-profile" {
description = "Determines whether instance profile will be created"
type = bool
default = false
}
variable "description" {
description = "Description of IAM role"
type = string
}
variable "managed-policy-arns" {
description = "List of managed policies to be attached to role"
type = list(string)
default = null
}
variable "role-name" {
description = "Name of IAM role"
type = string
}
variable "path" {
description = "Path of IAM role. Defaults to /Customer/"
type = string
default = "/Customer/"
}
variable "trusted-entity" {
description = "AWS service allowed to assume this role. Either this or assume-role-policy must be provided."
type = string
}
variable "assume-role-policy" {
description = "The actual assume role policy if trusted-entity is not provided."
type = string
default = null
}