Skip to content

Before moving to OIDC, I created this script that would update firstly check the age of a IAM credential, cycle it update the credentials of default and secondary varsets for a specified AWS account.

Notifications You must be signed in to change notification settings

GadgetGeekNI/aws_terraform_user_iam_key_rotation

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

5 Commits
 
 
 
 
 
 
 
 
 
 

Repository files navigation

aws_iam_keys_rotation_lambda

Process:

Ensure the Environment Tag of Terraform_User matches the name of the var set in TF Cloud (This is important)

Create a new file called account_(env_name).tf Copy the contents of the template file into the new file Uncomment the template file Find & Replate 'account' with the new env name

Add the new aws account secondary var_set in the terraform cloud Workspace.

Commit, push and apply.

Profit(?)

Should anyone require the credentials for manual work, retrieve them from the SecretsManager Entry in the respective account.

About

Before moving to OIDC, I created this script that would update firstly check the age of a IAM credential, cycle it update the credentials of default and secondary varsets for a specified AWS account.

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published