Skip to content

Commit e7e6c06

Browse files
update examples
1 parent 94abfe6 commit e7e6c06

File tree

2 files changed

+36
-1
lines changed

2 files changed

+36
-1
lines changed

README.md

Lines changed: 18 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -51,7 +51,24 @@ credential_process = aws-vault exec work --json
5151
Here's the gist of using it directly from github.
5252

5353
```hcl
54-
54+
data aws_caller_identity current {}
55+
56+
resource aws_iam_group support {
57+
name = "support"
58+
}
59+
60+
module enforce_mfa {
61+
source = "terraform-module/enforce-mfa/aws"
62+
version = "0.12.0"
63+
64+
policy_name = format("%s-managed-mfa-enforce", var.prefix)
65+
account_id = data.aws_caller_identity.current.id
66+
groups = [aws_iam_group.support.name]
67+
manage_own_password_without_mfa = true
68+
manage_own_signing_certificates = true
69+
manage_own_ssh_public_keys = true
70+
manage_own_git_credentials = true
71+
}
5572
```
5673

5774
## Assumptions

examples/basic/main.tf

Lines changed: 18 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,18 @@
1+
data aws_caller_identity current {}
2+
3+
resource aws_iam_group support {
4+
name = "support"
5+
}
6+
7+
module enforce_mfa {
8+
source = "terraform-module/enforce-mfa/aws"
9+
version = "0.12.0"
10+
11+
policy_name = "managed-mfa-enforce"
12+
account_id = data.aws_caller_identity.current.id
13+
groups = [aws_iam_group.support.name]
14+
manage_own_password_without_mfa = true
15+
manage_own_signing_certificates = true
16+
manage_own_ssh_public_keys = true
17+
manage_own_git_credentials = true
18+
}

0 commit comments

Comments
 (0)