initial commit

modules/security_identity_compliance/iam-role-v2/variables.tf

@@ -0,0 +1,51 @@
+variable "create-instance-profile" {
+  description = "Determines whether instance profile will be created"
+  type        = bool
+  default     = false
+}
+
+variable "description" {
+  description = "Description of IAM role"
+  type        = string
+}
+
+variable "policies" {
+  description = "Map of policies to be created and attached"
+  type = map(
+    object(
+      {
+        description = string
+        policy      = string
+      }
+    )
+  )
+  default = {}
+}
+
+variable "role-name" {
+  description = "Name of IAM role"
+  type        = string
+}
+
+variable "path" {
+  description = "Path of IAM role. Defaults to /Customer/"
+  type        = string
+  default     = "/Customer/"
+}
+
+variable "trusted-entity" {
+  description = "AWS service allowed to assume this role or a full assume role policy"
+  type        = string
+}
+
+variable "max-session-duration" {
+  description = "Max session duration in seconds"
+  type        = number
+  default     = 3600
+}
+
+variable "tags" {
+  description = "Tags additional to default tags"
+  type        = map(string)
+  default     = {}
+}