initial commit

modules/security_identity_compliance/iam-role/variables.tf

@@ -0,0 +1,38 @@
+variable "create-instance-profile" {
+  description = "Determines whether instance profile will be created"
+  type        = bool
+  default     = false
+}
+
+variable "description" {
+  description = "Description of IAM role"
+  type        = string
+}
+
+variable "managed-policy-arns" {
+  description = "List of managed policies to be attached to role"
+  type        = list(string)
+  default     = null
+}
+
+variable "role-name" {
+  description = "Name of IAM role"
+  type        = string
+}
+
+variable "path" {
+  description = "Path of IAM role. Defaults to /Customer/"
+  type        = string
+  default     = "/Customer/"
+}
+
+variable "trusted-entity" {
+  description = "AWS service allowed to assume this role. Set this to null if assume-role-policy is to be provided."
+  type        = string
+}
+
+variable "assume-role-policy" {
+  description = "The actual assume role policy if trusted-entity is not provided."
+  type        = string
+  default     = null
+}