---
constants:
  __name: "{{ name }}_{{ __guid }}"
variables:
  name:
    desc: "Name of the IAM user."
    required: true
    group: User Details
  path:
    desc: "Path for the IAM user."
    required: false
    group: User Details
    default: "/"
  force_destroy:
    desc: "Whether to force destroy the user when it has non-Terraform-managed resources."
    required: false
    group: Advanced
    default: false
    advanced: true
  permissions_boundary:
    desc: "ARN of the policy that is used to set the permissions boundary for the user."
    required: false
    group: Advanced
    links_to: resource.aws_iam_policy.arn
  tags:
    group: Tags
    required: false
groups:
  User Details:
    order: 1
    desc: "Basic details for the IAM user."
  Advanced:
    order: 2
    desc: "Advanced settings for the IAM user."
  Tags:
    order: 3
    desc: "Tags to assign to the IAM user."
---

resource "aws_iam_user" "__name" {
  name                 = {{ name }}
  path                 = {{ path }}
  force_destroy        = {{ force_destroy }}
  permissions_boundary = {{ permissions_boundary | required: false }}

  tags = {
    Name = {{ name }}
    {{# tags }}
      {{ tags.key | required: false }} = {{ tags.value | required: false }}
    {{/ tags }}
  }
}

// The user is created with the specified settings.
// Tags are encouraged for resource identification and management.
// Advanced options like permissions boundary are available for enhanced security control.
//