Gruntwork Access

Grant the Gruntwork team access to one of your AWS accounts so we can deploy a Reference Architecture for you or help with troubleshooting!

View on GitHub

Reference

Inputs

• grant_security_account_access — Set to true to grant your security account, with the account ID specified in security_account_id, access to the IAM role. This is required for deploying a Reference Architecture.

• gruntwork_aws_account_id — The ID of the AWS account that will be allowed to assume the IAM role.

• iam_role_name — The name to use for the IAM role

• managed_policy_name — The name of the AWS Managed Policy to attach to the IAM role. To deploy a Reference Architecture, the Gruntwork team needs AdministratorAccess, so this is the default.

• require_mfa — If set to true, require MFA to assume the IAM role from the Gruntwork account.

• security_account_id — The ID of your security account (where IAM users are defined). Required for deploying a Reference Architecture, as the Gruntwork team deploys an EC2 instance in the security account, and that instance assumes this IAM role to get access to all the other child accounts and bootstrap the deployment process.

• tags — Tags to apply to all resources created by this module

Outputs

• iam_role_arn — The ARN of the IAM role

• iam_role_name — The name of the IAM role