cloudposse/sso
Terraform module to configure AWS Single Sign-On (SSO).
About
Terraform module to configure AWS Single Sign-On (SSO).
Maintained by cloudposse on the Terraform Registry. Latest version 1.2.1, 2.6M downloads. Requires providers: aws.
Deploy creates a StackGuardian workflow from the module's GitHub repository, pinned to this version. You set the inputs, see the plan, then approve the apply.
Use cases
- Least-privilege roles created from a reviewed template, not copied by hand.
- Workload identity for pods, functions and CI without long-lived keys.
- Access changes that leave an audit trail.
Inputs
This module is a collection of submodules; pick one when you create the workflow. Inputs depend on the submodule.
The full list of inputs is on the registry page.
What it creates
Resources depend on the submodule you choose.
How it runs on StackGuardian
Terraform workflow from the module's GitHub repository: plan, policy check, approval, then apply.
Approvals happen in StackGuardian. An agent can never approve its own run. Every run keeps its plan, policy results and approver in the audit log.