Terraform: AWS: Role for Cross-Account Access support

Created on 15 Aug 2016 · 3Comments · Source: hashicorp/terraform

Any idea if and when AWS: Role for Cross-Account Access" in Terraform's IAM resource "aws_iam_role" will be supported in Terraform???

provideaws question

Source

pdakhane

Most helpful comment

This is currently supported. We use it extensively in an MSP environment. You simply create an IAM role, and assign the appropriate assume_role_policy.

resource "aws_iam_role" "MSPAdmin" {
  name = "MSP-Admin"
  assume_role_policy = <<EOF
{
  "Version": "2012-10-17",
  "Statement": {
    "Effect": "Allow",
    "Principal": {
      "AWS": "arn:aws:iam::ACCOUNT_NUMBER_HERE:root"
    },
    "Action": "sts:AssumeRole"
  }
}
EOF
}

geekifier on 16 Aug 2016

👍18

All 3 comments

This is currently supported. We use it extensively in an MSP environment. You simply create an IAM role, and assign the appropriate assume_role_policy.

resource "aws_iam_role" "MSPAdmin" {
  name = "MSP-Admin"
  assume_role_policy = <<EOF
{
  "Version": "2012-10-17",
  "Statement": {
    "Effect": "Allow",
    "Principal": {
      "AWS": "arn:aws:iam::ACCOUNT_NUMBER_HERE:root"
    },
    "Action": "sts:AssumeRole"
  }
}
EOF
}

geekifier on 16 Aug 2016

👍18

Closing since @geekifier is a hero.

mitchellh on 17 Aug 2016

👍2 🎉1

I'm going to lock this issue because it has been closed for _30 days_ ⏳. This helps our maintainers find and focus on the active issues.

If you have found a problem that seems similar to this, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.