terraform-prismacloud-aws-role

Terraform Module for Prisma Cloud AWS IAM role

Usage

module "pc_role" {
  providers = {
    aws = aws.target_account
  }

  source = "github.com/hasitha-u/terraform-prismacloud-aws-role"
  account_type = "standard"
  protection_mode = "MONITOR"
  external_id = random_uuid.external_id.result
}

Requirements

Name	Version
terraform	>= 1.0
aws	>= 4.0

Providers

Name	Version
aws	>= 4.0

Modules

No modules.

Resources

Name	Type
aws_iam_policy.readonly	resource
aws_iam_policy.readwrite	resource
aws_iam_role.this	resource
aws_iam_role_policy_attachment.managed_policy	resource
aws_iam_role_policy_attachment.readonly	resource
aws_iam_role_policy_attachment.readwrite	resource

Inputs

Name	Description	Type	Default	Required
account_type	The type of the AWS account to be onboarded to Prisma Cloud (standard|organization|org_member)	string	"standard"	no
external_id	ExternalID for the IAM role	string	n/a	yes
protection_mode	Prisma Cloud Protection mode. (MONITOR|MONITOR_AND_PROTECT)	string	"MONITOR"	no
role_name_prefix	Role name prefix	string	""	no
tags	A map of tags to assign to resources	map(string)	{}	no

Outputs

Name	Description
role_arn	Prisma Cloud AWS IAM Role ARN