kubevela.github.io/docs/end-user/components/cloud-services/terraform/aws-iam-assumable-role-with...

39 lines
1.9 KiB
Markdown

---
title: AWS IAM-ASSUMABLE-ROLE-WITH-SAML
---
## Description
Terraform module which creates IAM resources on AWS
## Specification
### Properties
Name | Description | Type | Required | Default
------------ | ------------- | ------------- | ------------- | -------------
aws_saml_endpoint | AWS SAML Endpoint | string | false |
create_role | Whether to create a role | bool | false |
force_detach_policies | Whether policies should be detached from this role when destroying | bool | false |
max_session_duration | Maximum CLI/API session duration in seconds between 3600 and 43200 | number | false |
number_of_role_policy_arns | Number of IAM policies to attach to IAM role | number | false |
provider_id | ID of the SAML Provider. Use provider_ids to specify several IDs. | string | false |
provider_ids | List of SAML Provider IDs | list(string) | false |
role_description | IAM Role description | string | false |
role_name | IAM role name | string | false |
role_name_prefix | IAM role name prefix | string | false |
role_path | Path of IAM role | string | false |
role_permissions_boundary_arn | Permissions boundary ARN to use for IAM role | string | false |
role_policy_arns | List of ARNs of IAM policies to attach to IAM role | list(string) | false |
tags | A map of tags to add to IAM role resources | map(string) | false |
writeConnectionSecretToRef | The secret which the cloud resource connection will be written to | [writeConnectionSecretToRef](#writeConnectionSecretToRef) | false |
#### writeConnectionSecretToRef
Name | Description | Type | Required | Default
------------ | ------------- | ------------- | ------------- | -------------
name | The secret name which the cloud resource connection will be written to | string | true |
namespace | The secret namespace which the cloud resource connection will be written to | string | false |