mitlibraries / tf-mod-secrets

Terraform module for creating AWS secrets

This module can be used to create an AWS secret. Currently, the only use case we have is for a static third party secret. This module does not support rotation. All it will do is create an empty secret. Adding the actual secret content can be done by either manually updating it through the AWS console or by using the write policy to update it through some other means.

Requirements

Name	Version
terraform	>= 0.13
aws	~> 2.0

Providers

Name	Version
aws	~> 2.0

Modules

Name	Source	Version
label	github.com/MITLibraries/tf-mod-name	0.13

Resources

Name	Type
aws_iam_policy.r_policy	resource
aws_iam_policy.w_policy	resource
aws_secretsmanager_secret.default	resource
aws_iam_policy_document.read	data source
aws_iam_policy_document.write	data source

Inputs

Name	Description	Type	Default	Required
name	The Name of the application or solution (e.g. bastion or portal)	string	n/a	yes
tags	Additional tags (e.g. map('BusinessUnit','XYZ'))	map(string)	{}	no

Outputs

Name	Description
read_policy	Read policy ARN for the AWS secret
secret	Secret ARN
write_policy	Write policy ARN for the AWS secret