feat: add possibiblity to use AWS IAM roles for service accounts

cloudposse / terraform-aws-elasticsearch

Terraform module to provision an Elasticsearch cluster with built-in integrations with Kibana and Logstash.

https://cloudposse.com/accelerate

Apache License 2.0

218 stars 231 forks source link

Open ghost opened 2 years ago

ghost commented 2 years ago

To allow usage of AWS IRSA the assume role policy of the created IAM role needs to be adapted, therefore an additional (and optional) statement for the sts:AssumeRoleWithWebIdentity action was added
To decouple sts:AssumeRole for the Service and the AWS principal types all statements have been split into separate blocks

msvechla commented 1 year ago

Is there an update on this @goruha, can we get this merged?

mohramadan911 commented 1 year ago

looks promising we are waiting to use this feature in our labs as well , +1 for any merging updates ?

mergify[bot] commented 8 months ago

Thanks @davidsomebody for creating this pull request!

A maintainer will review your changes shortly. Please don't be discouraged if it takes a while.

While you wait, make sure to review our contributor guidelines.

[!TIP]

Need help or want to ask for a PR review to be expedited?

Join us on Slack in the #pr-reviews channel.