Best practices Blueprint for AWS IAM User

Customizable templates for deploying cloud infrastructure

AWS IAM User

This blueprint creates an AWS IAM User with best practices in mind, such as encouraging the use of tagging for resource identification and management. It provides advanced options like setting a permissions boundary for enhanced security control. The blueprint organizes variables into groups to assist users, including those who may not be cloud infrastructure experts, in configuring essential and advanced settings easily.

Create this Blueprint in Resourcely

Define and customize Blueprints to set what infrastructure configuration options are available to developers.


---
constants:
  __name: "{{ name }}_{{ __guid }}"
variables:
  name:
    desc: "Name of the IAM user."
    required: true
    group: User Details
  path:
    desc: "Path for the IAM user."
    required: false
    group: User Details
    default: "/"
  force_destroy:
    desc: "Whether to force destroy the user when it has non-Terraform-managed resources."
    required: false
    group: Advanced
    default: false
    advanced: true
  permissions_boundary:
    desc: "ARN of the policy that is used to set the permissions boundary for the user."
    required: false
    group: Advanced
    links_to: resource.aws_iam_policy.arn
  tags:
    group: Tags
    required: false
groups:
  User Details:
    order: 1
    desc: "Basic details for the IAM user."
  Advanced:
    order: 2
    desc: "Advanced settings for the IAM user."
  Tags:
    order: 3
    desc: "Tags to assign to the IAM user."
---

resource "aws_iam_user" "__name" {
  name                 = {{ name }}
  path                 = {{ path }}
  force_destroy        = {{ force_destroy }}
  permissions_boundary = {{ permissions_boundary | required: false }}

  tags = {
    Name = {{ name }}
    {{# tags }}
      {{ tags.key | required: false }} = {{ tags.value | required: false }}
    {{/ tags }}
  }
}

// The user is created with the specified settings.
// Tags are encouraged for resource identification and management.
// Advanced options like permissions boundary are available for enhanced security control.
//

A form is created automatically that accepts inputs that you defined in the Blueprint.

After filling out the Blueprint form, Terraform is generated and a PR is automatically submitted.

AWS IAM User

Talk to a Human