cisagov / molecule-packer-ci-iam-user-tf-module

A Terraform module that creates an AWS IAM user that can build AMIs via packer and/or access SSM parameters
Creative Commons Zero v1.0 Universal
1 stars 0 forks source link

Support cross-account access #8

Closed dav3r closed 4 years ago

dav3r commented 4 years ago

πŸ—£ Description

This PR changes this module from creating a user that must be the same account as the SSM Parameter Store and the AMI to supporting the case where the user is created in a different account, but still has the necessary permissions.

πŸ’­ Motivation and Context

As we move to the COOL, we need to update this module so that it supports creating a user in a different account than where the SSM Parameter Store and AMIs are located.

πŸ§ͺ Testing

Testing was done by executing terraform apply and terraform delete with a variety of inputs in the examples/read_a_single_parameter code and manually verifying that the resulting user had all of the necessary permissions to read SSM parameter store parameters and create AMIs.

πŸš₯ Types of Changes

βœ… Checklist