Awesome

Modernisation Platform Terraform IAM Superadmins Module

This repository holds a Terraform module that creates set IAM accounts and associated configuration, such as: account password policies, administrator groups, user accounts.

Usage

module "iam" {
  source        = "github.com/ministryofjustice/modernisation-platform-terraform-iam-superadmins"
  account_alias = "aws-account-alias"
}

Inputs

Name	Description	Type	Default	Required
account_alias	AWS IAM account alias for this account	string	n/a	yes

Outputs

Name	Description	Sensitive
superadmin_passwords	PGP-encrypted passwords for IAM users, if a pgp_key is specified	no

First-sign in and changing a password

The included force_mfa IAM policy doesn't allow a user to change their password without MFA enabled. When onboarding a new superadmin, they will need to configure MFA before logging in for the first time.

Looking for issues?

If you're looking to raise an issue with this module, please create a new issue in the Modernisation Platform repository.