tf-azure-aws-single-account-access

Terraform code to manage the creation of AWS Single-Account access apps in Azure Enterprise Apps and EntraID

Requirements

Name	Version
aws	~> 5.10
awscc	~> 0.57.0
azuread	2.44.0
http	3.4.0
random	3.4.2
vault	~> 3.19.0

Providers

Name	Version
aws	~> 5.10
azuread	2.44.0
http	3.4.0
random	3.4.2
time	n/a
vault	~> 3.19.0

Modules

No modules.

Resources

Name	Type
aws_iam_role.aws_admin_group_policy	resource
aws_iam_role.aws_read_only_group_policy	resource
aws_iam_role_policy_attachment.aws_iam_policy_admin_rights	resource
aws_iam_role_policy_attachment.aws_iam_policy_read_only_rights	resource
aws_iam_saml_provider.aws_saml_provider	resource
azuread_app_role_assignment.azuread_digitalis_admins	resource
azuread_app_role_assignment.azuread_read_only_user	resource
azuread_application_app_role.azuread_admin_aws_app_role	resource
azuread_application_app_role.azuread_aws_app_role	resource
azuread_application_from_template.azureas_aws_sso_application_from_template	resource
azuread_application_identifier_uri.azuread_aws_sso_application_uri	resource
azuread_claims_mapping_policy.azuread_sso_policy	resource
azuread_service_principal.azuread_service_principal	resource
azuread_service_principal_claims_mapping_policy_assignment.azuread_claims_mapping_policy_assignment	resource
azuread_service_principal_token_signing_certificate.azuread_signing_certificate	resource
random_uuid.azuread_admin_app_role_id	resource
random_uuid.azuread_read_only_app_role_id	resource
time_sleep.wait_60_seconds	resource
vault_generic_secret.metadata_sso_xml	resource
aws_caller_identity.current	data source
azuread_application.azuread_aws_sso_application	data source
azuread_application_template.azuread_aws_sso_template	data source
azuread_client_config.current	data source
azuread_group.azuread_admin_group	data source
azuread_group.azuread_read_only_group	data source
http_http.azure_metadata_xml	data source

Inputs

Name	Description	Type	Default	Required
account	The AWS Account you are working in. Can be a Internal Team Name, Client Name or any Name the is associated with the AWS account.	string	"account"	no
env	Environment that the AWS account is part of, Dev, Test, Prod and PreProd are some examples	string	"Dev"	no
region	AWS Region	string	"eu-west-2"	no

Outputs

No outputs.