cloudposse/iam-role
A Terraform module that creates IAM role with provided JSON IAM policies documents.
About
A Terraform module that creates IAM role with provided JSON IAM policies documents.
Maintained by cloudposse on the Terraform Registry. Latest version 1.0.0, 18.9M downloads. Requires providers: aws >= 2.0.
Deploy creates a StackGuardian workflow from the module's GitHub repository, pinned to this version. You set the inputs, see the plan, then approve the apply.
Use cases
- Least-privilege roles created from a reviewed template, not copied by hand.
- Workload identity for pods, functions and CI without long-lived keys.
- Access changes that leave an audit trail.
Inputs
Required inputs:
role_description— string
35 inputs, 5 outputs in total. The full list, with defaults and descriptions, is on the registry page.
What it creates
aws_iam_roleaws_iam_policyaws_iam_role_policyaws_iam_role_policy_attachment× 2aws_iam_instance_profile
How it runs on StackGuardian
Terraform workflow from the module's GitHub repository: plan, policy check, approval, then apply.
Approvals happen in StackGuardian. An agent can never approve its own run. Every run keeps its plan, policy results and approver in the audit log.