File tree Expand file tree Collapse file tree 2 files changed +36
-1
lines changed Expand file tree Collapse file tree 2 files changed +36
-1
lines changed Original file line number Diff line number Diff line change @@ -51,7 +51,24 @@ credential_process = aws-vault exec work --json
5151Here's the gist of using it directly from github.
5252
5353``` hcl
54-
54+ data aws_caller_identity current {}
55+
56+ resource aws_iam_group support {
57+ name = "support"
58+ }
59+
60+ module enforce_mfa {
61+ source = "terraform-module/enforce-mfa/aws"
62+ version = "0.12.0"
63+
64+ policy_name = format("%s-managed-mfa-enforce", var.prefix)
65+ account_id = data.aws_caller_identity.current.id
66+ groups = [aws_iam_group.support.name]
67+ manage_own_password_without_mfa = true
68+ manage_own_signing_certificates = true
69+ manage_own_ssh_public_keys = true
70+ manage_own_git_credentials = true
71+ }
5572```
5673
5774## Assumptions
Original file line number Diff line number Diff line change 1+ data aws_caller_identity current {}
2+
3+ resource aws_iam_group support {
4+ name = " support"
5+ }
6+
7+ module enforce_mfa {
8+ source = " terraform-module/enforce-mfa/aws"
9+ version = " 0.12.0"
10+
11+ policy_name = " managed-mfa-enforce"
12+ account_id = data. aws_caller_identity . current . id
13+ groups = [aws_iam_group . support . name ]
14+ manage_own_password_without_mfa = true
15+ manage_own_signing_certificates = true
16+ manage_own_ssh_public_keys = true
17+ manage_own_git_credentials = true
18+ }
You can’t perform that action at this time.
0 commit comments