Skip to content

Provision AWS Organization and member accounts. Allows roles, users and or groups access to assume the member role

License

Notifications You must be signed in to change notification settings

goci-io/aws-organization-master

Repository files navigation

aws-organization-master

Maintained by @goci-io/prp-terraform

terraform

This module provisions an AWS Organization and corresponding member accounts. Read more about AWS Organizations in general. Additionally this module allows you to pass in role, user or group names to grant access to assume the organization role created in the member accounts.

Configuration

Please note hints about AWS organizations and how to delete them properly from Terraform documentation

Name Description Default
stages List of stages which represent member accounts. Object of name, email and billing_access -
organization_access_role_name Name of the role automatically created in the member accounts by AWS OrganizationAccountAccessRole
namespace The company or organization prefix (eg: goci) -
allow_assume_for_groups List of group names in the master account, allowed to assume the member role []
allow_assume_for_users List of usernames in the master account, allowed to assume the member role []
allow_assume_for_roles List of role names in the master account, allowed to assume the member role []
only_with_mfa Enforces MFA for users, groups and roles. If false roles will be able to assume without MFA enabled false
disable_mfa  Disables MFA for users, groups. Cannot be used in combination with only_with_mfa. We suggest to not disbale MFA for humans false

Look into the terraform.tfvars example.

About

Provision AWS Organization and member accounts. Allows roles, users and or groups access to assume the member role

Topics

Resources

License

Stars

Watchers

Forks

Packages

No packages published

Languages