terraform-aws-control_tower_account_factory
terraform-aws-control_tower_account_factory copied to clipboard
Differentiate customization per account within the one `aft-account-customization` template folder
Describe the outcome you'd like
To be able to group AWS accounts under one account_template
folder, for instance, by OU. Meantime, differentiate customization per account within the group.
Is your feature request related to a problem you are currently experiencing? If so, please describe.
I would like to avoid having account_template
created per each account that wouldn't be possible to fit into the group.
Thank you!
Hey Kyrylo, appreciate you reaching out. To make sure I understand the feature request, would you be able to give a specific example that demonstrates a directory structure that you'd like to see supported?
Hi @adam-daily, sure. I was looking for something like below
.
|---**aft-account-customizations**
|---**OU/group**-customization
|---api_helpers
| |---post-api-helpers.sh
| |---pre-api-helpers.sh
| |---python
| |---requirements.txt
|---terraform
|---aft-providers.jinja
|---backend.jinja
|---**account A**-customization
| |---main.tf
|---**account B**-customization
| |---main.tf
|---main.tf
Based on the above tree. I thought next, if we use Account-Template name as a label to leverage in aft-account-request repo. To customize further requested AWS accounts. We can use the top folder name as a group label, for instance, corresponding AWS Organization OU name. Till now it's clear and works well. However, what if I would like to customize within the group some AWS accounts differently from OU provided configuration. Meantime, not duplicating all the tree per account. I would just create corresponding folder under OU structure to keep per account customization. And, using account A-customization name as a label to apply certain customization in aft-account-request. So that, I would have the ability to choose between labels I have to apply. By the way, there is a question whether I am able to apply two labels at a time to account-request for customization.
There wouldn't be a question above if aft-global-customization could be applied to certain group of accounts and not to all accounts provisioned with AFT.
I might be wrong and there is somewhere plain solution for my task. Please advise!