terraform-aws-tfstate-backend
terraform-aws-tfstate-backend copied to clipboard
Adding support for setting permissions boundary on IAM-role
This is my first PR to Cloudposse projects. Thanks for all the good contributions and please let me know if there's any adjustments needed.
what
- This will add support for setting a permission boundary for the IAM role
- This is needed for master payer accounts through resellers that restricts access to the master payer accunt.
- The value is optional
why
- This is needed for master payer accounts through resellers that restricts access to the master payer account and require the permissions boundary to be set on all new IAM roles to restrict access to certain resources.
references
- AWS documentation: https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_boundaries.html
- https://registry.terraform.io/providers/hashicorp/aws%20%20/latest/docs/resources/iam_role#permissions_boundary