fully working with optional values. #skip

Author: ivankatliarchuk

.github/workflows/release.yaml

@@ -7,7 +7,7 @@ on:
 env:
   WITH_V: true
   DEFAULT_BUMP: patch
-  INITIAL_VERSION: 0.0.0
+  INITIAL_VERSION: 0.12.0
   TERRAFORM_VERSION: 0.12
 
 jobs:
@@ -44,6 +44,6 @@ jobs:
         draft: false
         prerelease: false
         body: |
-          Changes in this Release ${{ steps.register.outputs.changelog }}
+          Changes in this Release ${{ steps.register.outputs.release_timestamp }}
           - ${{ steps.register.outputs.changelog }}
           - Terraform Version: ${{ env.TERRAFORM_VERSION }}

.pre-commit-config.yaml

@@ -21,6 +21,7 @@ repos:
   hooks:
   - id: terraform_fmt
   - id: terraform_docs
+  - id: terraform_tflint
 - repo: git://github.com/smian/pre-commit-makefile
   rev: 261f8fb4b31dfdc05d1a1d7fbde1f1462ecde66d
   hooks:

.tflint.hcl

@@ -1,6 +1,45 @@
 config {
   deep_check = false
-  ignore_rule = {}
   ignore_module = {}
   varfile = []
-}
+}
+
+rule "terraform_documented_variables" {
+  enabled = true
+}
+
+rule "terraform_documented_outputs" {
+  enabled = true
+}
+
+rule "terraform_comment_syntax" {
+  enabled = true
+}
+
+rule "terraform_naming_convention" {
+  enabled = true
+}
+
+rule "terraform_deprecated_interpolation" {
+  enabled = true
+}
+
+rule "terraform_deprecated_index" {
+  enabled = true
+}
+
+rule "terraform_required_providers" {
+  enabled = true
+}
+
+rule "terraform_required_version" {
+  enabled = true
+}
+
+rule "terraform_typed_variables" {
+  enabled = true
+}
+
+rule "terraform_unused_declarations" {
+  enabled = true
+}

README.md

@@ -18,6 +18,34 @@ Terraform module `terraform-aws-enforce-mfa`
 ![](https://img.shields.io/github/last-commit/terraform-module/terraform-aws-enforce-mfa)
 [![Maintenance](https://img.shields.io/badge/Maintenu%3F-oui-green.svg)](https://GitHub.com/terraform-module/terraform-aws-enforce-mfa/graphs/commit-activity)
 
+## Documentations
+
+- [aws-vault setup](https://github.com/99designs/aws-vault)
+- [aws-cli setup](https://docs.aws.amazon.com/cli/latest/topic/config-vars.html#sourcing-credentials-from-external-processes)
+- [users with self managed mfa](https://docs.aws.amazon.com/IAM/latest/UserGuide/tutorial_users-self-manage-mfa-and-creds.html)
+
+Optional `.aws/config` setup and `aws-vault`
+
+```sh
+[profile personal]
+region=us-west-2
+output=json
+
+[profile work]
+region=us-west-1
+output=json
+
+[profile work]
+source_profile = work
+mfa_serial = arn:aws:iam::<account>:mfa/<username>
+credential_process = aws-vault exec work --json
+
+[profile personal]
+source_profile = personal
+mfa_serial = arn:aws:iam::<account>:mfa/<username>
+credential_process = aws-vault exec work --json
+```
+
 ## Usage example
 
 Here's the gist of using it directly from github.
@@ -33,7 +61,41 @@ Here's the gist of using it directly from github.
 ## Module Variables
 
 <!-- BEGINNING OF PRE-COMMIT-TERRAFORM DOCS HOOK -->
-Error: no lines in file
+## Requirements
+
+| Name | Version |
+|------|---------|
+| terraform | >= 0.12 |
+
+## Providers
+
+| Name | Version |
+|------|---------|
+| aws | n/a |
+
+## Inputs
+
+| Name | Description | Type | Default | Required |
+|------|-------------|------|---------|:--------:|
+| account\_id | Account identification. (Optional, default '\*') | `string` | `"*"` | no |
+| groups | Enforce MFA for the members in these groups. (Optional, default '[]') | `list(string)` | `[]` | no |
+| manage\_own\_access\_keys | Allow a new AWS secret access key and corresponding AWS access key ID for the specified user. | `bool` | `false` | no |
+| manage\_own\_git\_credentials | Allow managing git credentials. | `bool` | `false` | no |
+| manage\_own\_password\_without\_mfa | Whethehr password management without mfa is allowd | `bool` | `true` | no |
+| manage\_own\_signing\_certificates | Allow managing signing certificates. | `bool` | `false` | no |
+| manage\_own\_ssh\_public\_keys | Allow managing ssh public keys. | `bool` | `false` | no |
+| path | Path in which to create the policy. (Optional, default '/') | `string` | `"/"` | no |
+| policy\_name | The name of the policy. | `string` | `"managed-force-mfa-policy"` | no |
+
+## Outputs
+
+| Name | Description |
+|------|-------------|
+| arn | The policy's ARN. |
+| groups | The groups to which policy is attached |
+| id | The policy's ID. |
+| policy\_json | The above arguments serialized as a standard JSON policy document. |
+
 <!-- END OF PRE-COMMIT-TERRAFORM DOCS HOOK -->
 
 ## Commands