feat: new iam-user module and secretsmanager-2025 module

2026-04-25 21:42:02 +08:00
parent 5fd8aa807f
commit 2ef2ad1571
12 changed files with 473 additions and 140 deletions
@@ -0,0 +1,89 @@
+variable "name" {
+  description = "name of secret"
+  type        = string
+  default     = null
+}
+
+variable "description" {
+  description = "description of secret"
+  type        = string
+  default     = null
+}
+
+variable "policy" {
+  description = "access policy to the secret"
+  type        = string
+  default     = null
+}
+
+variable "secret" {
+  description = "the secret you want to store"
+  type        = any
+  default     = null
+}
+
+variable "recovery_window_in_days" {
+  description = "Number of days that AWS Secrets Manager waits before it can delete the secret"
+  type        = number
+  default     = 30
+}
+
+variable "tags" {
+  description = "(Optional) A mapping of tags to assign to the AWS Secrets Manager."
+  type        = map(string)
+  default     = {}
+}
+
+variable "generate_secret" {
+  type        = bool
+  default     = false
+  description = "If set to true, a secure password will be generated and saved."
+}
+
+variable "kms_key_id" {
+  type        = string
+  default     = null
+  description = "Custom kms key id. If not specified, the default key aws/secretmanager key will be used."
+}
+
+variable "secret_use_special_char" {
+  type        = bool
+  default     = true
+  description = "Set false to not use special characters"
+}
+
+variable "secret_version" {
+  type        = number
+  description = "Secret version, default to 1. For subsequent update, set it to more than 1."
+  default     = 1
+}
+
+variable "auto-rotation-days" {
+  type        = number
+  description = "Days to auto rotate secret"
+  default     = null
+}
+
+variable "auto-rotation-schedule-expression" {
+  type        = string
+  description = "Schedule expression for auto secret rotation"
+  default     = null
+}
+
+variable "rotation-lambda-arn" {
+  type        = string
+  description = "ARN of lambda secret rotation function"
+  default     = null
+}
+
+variable "enable-auto-rotation" {
+  type        = bool
+  description = "Set true to enable auto rotation"
+  default     = false
+}
+
+variable "rotate-immediately" {
+  type        = bool
+  default     = false
+  description = "Rotate secret immediately"
+}