cloudposse/iam-system-user
Terraform module to provision a basic IAM system user suitable for CI/CD systems.
About
Terraform module to provision a basic IAM system user suitable for CI/CD systems.
Maintained by cloudposse on the Terraform Registry. Latest version 1.2.1, 25.8M downloads.
Deploy creates a StackGuardian workflow from the module's GitHub repository, pinned to this version. You set the inputs, see the plan, then approve the apply.
Use cases
- Least-privilege roles created from a reviewed template, not copied by hand.
- Workload identity for pods, functions and CI without long-lived keys.
- Access changes that leave an audit trail.
Inputs
No required inputs. Every variable has a default, so the first run works with an empty input form.
The full list of inputs is on the registry page.
What it creates
See the resources tab on the registry.
How it runs on StackGuardian
Terraform workflow from the module's GitHub repository: plan, policy check, approval, then apply.
Approvals happen in StackGuardian. An agent can never approve its own run. Every run keeps its plan, policy results and approver in the audit log.