refactor: organize plugin to support multiple services (#1)

Co-authored-by: Michael Li <michael.li@hashicorp.com>
This commit is contained in:
Damian DebkowskiandMichael Li authored and Damian Debkowski committed 2023-04-30 23:30:08 -07:00
1 parent c441058b3e
commit 46c53fb94a
31 files changed
+2951 -2446

No files matched your search

+98
View File
@@ -0,0 +1,98 @@
# Copyright (c) HashiCorp, Inc.
# SPDX-License-Identifier: MPL-2.0
variable "iam_user_prefix" {
default = "boundary-plugin-host-aws-test-iam-user"
}
variable "iam_user_count" {
default = 6
}
resource "random_id" "aws_iam_user_name" {
count = var.iam_user_count
prefix = "${var.iam_user_prefix}-${count.index}"
byte_length = 4
}
resource "aws_iam_user" "user" {
count = var.iam_user_count
name = random_id.aws_iam_user_name[count.index].dec
force_destroy = true
}
resource "aws_iam_access_key" "user_initial_key" {
count = var.iam_user_count
user = aws_iam_user.user[count.index].name
}
resource "aws_iam_policy" "ec2_describeinstances" {
name = "BoundaryPluginHostAwsTestDescribeInstancesPolicy"
policy = <<EOF
{
"Version": "2012-10-17",
"Statement": [
{
"Action": [
"ec2:DescribeInstances"
],
"Effect": "Allow",
"Resource": "*"
}
]
}
EOF
}
resource "aws_iam_user_policy_attachment" "user_ec2_describeinstances_attachment" {
count = var.iam_user_count
user = aws_iam_user.user[count.index].name
policy_arn = aws_iam_policy.ec2_describeinstances.arn
}
resource "aws_iam_policy" "user_self_manage_policy" {
count = var.iam_user_count
name = "BoundaryPluginHostAwsTestUserSelfManagePolicy-${count.index}"
policy = <<EOF
{
"Version": "2012-10-17",
"Statement": [
{
"Action": [
"iam:DeleteAccessKey",
"iam:GetUser",
"iam:CreateAccessKey"
],
"Effect": "Allow",
"Resource": "${aws_iam_user.user[count.index].arn}"
}
]
}
EOF
}
resource "aws_iam_user_policy_attachment" "user_self_manage_policy_attachment" {
count = var.iam_user_count
user = aws_iam_user.user[count.index].name
policy_arn = aws_iam_policy.user_self_manage_policy[count.index].arn
}
output "iam_user_names" {
value = aws_iam_user.user.*.name
}
output "iam_user_arns" {
value = aws_iam_user.user.*.arn
}
output "iam_access_key_ids" {
value = aws_iam_access_key.user_initial_key.*.id
sensitive = true
}
output "iam_secret_access_keys" {
value = aws_iam_access_key.user_initial_key.*.secret
sensitive = true
}