Creates an IAM user/group for CI to use to push images to ECR.

Creates the following resources:

• IAM user, group, and policy.

Usage

module "ecr_ci_myapp" {
 source = "trussworks/iam-ecr-ci/aws"

 ecr_repo = "myapp"
 ci_name  = "CircleCI"
}

Requirements

Name	Version
terraform	>= 1.0
aws	>= 3.0

Providers

Name	Version
aws	>= 3.0

Modules

No modules.

Resources

Name	Type
aws_iam_group.main	resource
aws_iam_group_membership.main	resource
aws_iam_group_policy_attachment.main	resource
aws_iam_policy.main	resource
aws_iam_user.main	resource
aws_ecr_repository.main	data source
aws_iam_policy_document.main	data source

Inputs

Name	Description	Type	Default	Required
ci_name	Name of the CI system (e.g., CircleCI, Jenkins, …).	string	n/a	yes
ci_project	Name of the project being built. Uses ecr_repo name by default.	string	""	no
ecr_repo	Name of the ECR repository.	string	n/a	yes

Outputs

No outputs.

Developer Setup

Install dependencies (macOS)

brew install pre-commit go terraform terraform-docs