Usage

Creates an IAM role for use as a RDS monitoring role.

module "rds_monitoring_role" {
  source = "dod-iac/rds-monitoring-role/aws"

  name = format("app-%s-rds-monitoring-role-%s", var.application, var.environment)

  tags  = {
    Application = var.application
    Environment = var.environment
    Automation  = "Terraform"
  }
}

Testing

Run all terratest tests using the terratest script. If using aws-vault, you could use aws-vault exec $AWS_PROFILE -- terratest. The AWS_DEFAULT_REGION environment variable is required by the tests. Use TT_SKIP_DESTROY=1 to not destroy the infrastructure created during the tests. Use TT_VERBOSE=1 to log all tests as they are run. The go test command can be executed directly, too.

Terraform Version

Terraform 0.13. Pin module version to ~> 1.0.0 . Submit pull-requests to main branch.

Terraform 0.11 and 0.12 are not supported.

License

This project constitutes a work of the United States Government and is not subject to domestic copyright protection under 17 USC § 105. However, because the project utilizes code licensed from contributors and other third parties, it therefore is licensed under the MIT License. See LICENSE file for more information.

Requirements

Name	Version
terraform	>= 0.13
aws	>= 3.0, < 5.0

Providers

Name	Version
aws	>= 3.0, < 5.0

Modules

No modules.

Resources

Name	Type
aws_iam_role.main	resource
aws_iam_role_policy_attachment.amazon_rds_enhanced_monitoring_role	resource
aws_iam_policy_document.assume_role_policy	data source

Inputs

Name	Description	Type	Default	Required
assume_role_policy	The assume role policy for the AWS IAM role. If blank, allows the RDS monitoring service in the account to assume the role.	string	""	no
name	The name of the AWS IAM role.	string	"rds-monitoring-role"	no
tags	Tags applied to the AWS IAM role.	map(string)	{}	no

Outputs

Name	Description
arn	The Amazon Resource Name (ARN) of the AWS IAM Role.
name	The name of the AWS IAM Role.