/
main.tf
33 lines (29 loc) · 1.06 KB
/
main.tf
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
terraform {
required_providers {
aws = {
source = "hashicorp/aws"
version = ">= 4.0"
}
tls = ">= 4.0.3"
}
}
data "tls_certificate" "bitbucket" {
url = var.bitbucket_tls_url
}
resource "aws_iam_openid_connect_provider" "bitbucket" {
url = var.bitbucket_tls_url
client_id_list = [var.aud_value]
thumbprint_list = [data.tls_certificate.bitbucket.certificates.0.sha1_fingerprint]
}
module "aws_oidc_bitbucket" {
for_each = var.role_subject-repos_policies
source = "./modules/aws-roles-oidc-bitbucket"
role_name = each.key
role_path = each.value.role_path != null ? each.value.role_path : "/"
bitbucket_repos = each.value.subject_repos
policy_arns = each.value.policy_arns
assume_role_names = each.value.assume_role_names
bitbucket_oidc_provider_arn = aws_iam_openid_connect_provider.bitbucket.arn
bitbucket_oidc_provider_url = aws_iam_openid_connect_provider.bitbucket.url
max_session_duration = var.max_session_duration
}