Skip to content

alibabacloud-automation/terraform-alicloud-control-policy

Repository files navigation

Alicloud ControlPolicy Terraform Module On Alibaba Cloud

terraform-alicloud-control-policy

English | 简体中文

This scheme is implemented automatically using terraform. Using terraform, a new control policy is created and bound under the resource folder specified by the user.

These types of resources are supported:

Usage

module "example" {
  source              = "terraform-alicloud-modules/control-policy/alicloud"
  control_policy_name = "policy_name"
}

Notes

  • This module using AccessKey and SecretKey are from profile and shared_credentials_file. If you have not set them yet, please install aliyun-cli and configure it.

Requirements

Name Version
terraform >= 0.13
alicloud >= 1.120.0

Providers

Name Version
alicloud >= 1.120.0

Modules

No modules.

Resources

Name Type
alicloud_resource_manager_control_policy.default resource
alicloud_resource_manager_control_policy_attachment.attach resource
alicloud_resource_manager_resource_directory.default resource
alicloud_resource_manager_resource_directories.default data source

Inputs

Name Description Type Default Required
control_policy_name Policy name string "policy_name" no
description Policy description string "" no
effect_scope Policy scope string "RAM" no
policy_document Policy configuration map
{
"Statement": [
{
"Action": [
"ram:UpdateRole",
"ram:DeleteRole",
"ram:AttachPolicyToRole",
"ram:DetachPolicyFromRole"
],
"Effect": "Deny",
"Resource": "acs:ram:::role/ResourceDirectoryAccountAccessRole"
}
],
"Version": "1"
}
no
resource_manager_folder_ids Bound resource folder ID group list(string) [] no

Outputs

Name Description
this_control_policy_name n/a

Submit Issues

If you have any problems when using this module, please opening a provider issue and let us know.

Note: There does not recommend opening an issue on this repo.

Authors

Created and maintained by Will([email protected])

License

MIT Licensed. See LICENSE for full details.

Reference