assume_role module
This module uses awscli, calls sts and obtain temp credentials for role switching. Returns the temp credential as a map.
System requirements
Inputs
variable |
type |
required |
description |
account_id |
string |
yes |
target aws account id |
role_name |
string |
yes |
target role name |
role_session_name |
string |
no |
session name, useful for tracing logs in cloudtrail. defaults to tf_awscli |
Outputs
variable |
type |
sensitive |
description |
temp_credential |
map of string |
yes |
json output from awscli |
{
"AccessKeyId": "111",
"SecretAccessKey": "222",
"SessionToken": "333",
"Expiration": "2023-07-01T10:19:47+00:00"
}