diff --git a/.terraform-docs.yml b/.terraform-docs.yml
index 4375fa2..9322b48 100644
--- a/.terraform-docs.yml
+++ b/.terraform-docs.yml
@@ -18,7 +18,7 @@ content: |-
Just only add the following code to your Terraform code
```hcl
- {{ include "./examples/itmc_integration.tf" }}
+ {{ include "./examples/admina_integration.tf" }}
```
To learn how to use Modules in Terraform, let's to see [here](https://developer.hashicorp.com/terraform/language/modules).
diff --git a/README.md b/README.md
index c195ed2..60e8dfb 100644
--- a/README.md
+++ b/README.md
@@ -1,42 +1,42 @@
-# terraform-aws-itmc-integration
+# terraform-aws-admina-integration
This is a Terraform Module that can be used for AWS Integration provided by Money Forward i.
-https://registry.terraform.io/modules/moneyforward-i/itmc-integration/aws/latest
-
+https://registry.terraform.io/modules/moneyforward-i/admina-integration/aws/latest
-[](https://github.com/moneyforward-i/terraform-aws-itmc-integration/releases/latest)
-[](https://registry.terraform.io/modules/moneyforward-i/itmc-integration/aws/latest)
-[](https://github.com/moneyforward-i/terraform-aws-itmc-integration/issues)
-[](https://github.com/moneyforward-i/terraform-aws-itmc-integration/network/members)
-[](https://github.com/moneyforward-i/terraform-aws-itmc-integration/stargazers)
-[](https://github.com/moneyforward-i/terraform-aws-itmc-integration/)
-[](https://github.com/moneyforward-i/terraform-aws-itmc-integration/)
+[](https://github.com/moneyforward-i/terraform-aws-admina-integration/releases/latest)
+[](https://registry.terraform.io/modules/moneyforward-i/admina-integration/aws/latest)
+
+[](https://github.com/moneyforward-i/terraform-aws-admina-integration/issues)
+[](https://github.com/moneyforward-i/terraform-aws-admina-integration/network/members)
+[](https://github.com/moneyforward-i/terraform-aws-admina-integration/stargazers)
+[](https://github.com/moneyforward-i/terraform-aws-admina-integration/)
+[](https://github.com/moneyforward-i/terraform-aws-admina-integration/)
# Tags
-`IT Management Cloud` `SaaS Management Platform`
+`Admina` `SaaS Management Platform`
# Advantages
-You can easily create a Role to connect to the IT Management Cloud with AWS which was provided by Money Forward i.
+You can easily create a Role to connect to the Admina with AWS which was provided by Money Forward i.
-This Terraform Module is maintained regularly by Money Forward i,
+This Terraform Module is maintained regularly by Money Forward i,
so you can easily keep it up-to-date by importing it as a Module.
-[Official page(JP)](https://i.moneyforward.com/) [(EN)](https://i.moneyforward.com/us/)
-
-[Integration Support Page](https://support.itmc.i.moneyforward.com/article/dc2mjsw9oy-aws)
+[Official page(JP)](https://i.moneyforward.com/) [(EN)](https://admina.moneyforward.com/)
+[Integration Support Page](https://support.admina.i.moneyforward.com/article/dc2mjsw9oy-aws)
# About Module
-
@@ -49,14 +49,14 @@ Just only add the following code to your Terraform code
```hcl
# This file can be copied and used as it is.
-module "itmc-integration" {
- source = "moneyforward-i/itmc-integration/aws"
+module "admina-integration" {
+ source = "moneyforward-i/admina-integration/aws"
}
-output "itmc_role_arn" {
- value = module.itmc-integration.role_arn
+output "admina_role_arn" {
+ value = module.admina-integration.role_arn
}
-output "itmc_role_external_id" {
- value = module.itmc-integration.external_id
+output "admina_role_external_id" {
+ value = module.admina-integration.external_id
}
```
To learn how to use Modules in Terraform, let's to see [here](https://developer.hashicorp.com/terraform/language/modules).
@@ -68,6 +68,7 @@ To learn how to use Modules in Terraform, let's to see [here](https://developer.
|------|-------------|------|---------|:--------:|
| [additional\_tags](#input\_additional\_tags) | A mapping of additional resource tags | `map(string)` | `{}` | no |
| [role\_path](#input\_role\_path) | Path to place the Role. | `string` | `"/integration/"` | no |
+| [read\_only](#input\_read\_only) | If true, the role will be read only. | `bool` | `false` | no |
@@ -75,8 +76,8 @@ No modules. -->
| Name | Description |
|------|-------------|
-| [role\_arn](#output\_role\_arn) | The output is the Arn of the Role that was created.
This value will be able to enter into IntegrationPage on ITMC |
-| [external\_id](#output\_external\_id) | The output is the External ID of the Role that was created.
This value will be able to enter into IntegrationPage on ITMC |
+| [role\_arn](#output\_role\_arn) | The output is the Arn of the Role that was created.
This value will be able to enter into IntegrationPage on Admina |
+| [external\_id](#output\_external\_id) | The output is the External ID of the Role that was created.
This value will be able to enter into IntegrationPage on Admina |
### Resources
@@ -86,10 +87,10 @@ No modules. -->
| [aws_iam_role.this](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iam_role) | resource |
| [aws_iam_role_policy.role_policy](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iam_role_policy) | resource |
| [random_id.extrnal_id](https://registry.terraform.io/providers/hashicorp/random/latest/docs/resources/id) | resource |
+| [aws_iam_policy_document.read_only_role_policy](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/iam_policy_document) | data source |
| [aws_iam_policy_document.role_policy](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/iam_policy_document) | data source |
| [aws_iam_policy_document.trusted_policy](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/iam_policy_document) | data source |
-
-
\ No newline at end of file
+
diff --git a/examples/admina_integration.tf b/examples/admina_integration.tf
new file mode 100644
index 0000000..80c4ebc
--- /dev/null
+++ b/examples/admina_integration.tf
@@ -0,0 +1,10 @@
+# This file can be copied and used as it is.
+module "admina-integration" {
+ source = "moneyforward-i/admina-integration/aws"
+}
+output "admina_role_arn" {
+ value = module.admina-integration.role_arn
+}
+output "admina_role_external_id" {
+ value = module.admina-integration.external_id
+}
diff --git a/examples/itmc_integration.tf b/examples/itmc_integration.tf
deleted file mode 100644
index a36f692..0000000
--- a/examples/itmc_integration.tf
+++ /dev/null
@@ -1,10 +0,0 @@
-# This file can be copied and used as it is.
-module "itmc-integration" {
- source = "moneyforward-i/itmc-integration/aws"
-}
-output "itmc_role_arn" {
- value = module.itmc-integration.role_arn
-}
-output "itmc_role_external_id" {
- value = module.itmc-integration.external_id
-}
diff --git a/main.tf b/main.tf
index c095b66..41182f5 100644
--- a/main.tf
+++ b/main.tf
@@ -1,5 +1,5 @@
locals {
- extrnal_id = random_id.extrnal_id.id
+ extrnal_id = random_id.extrnal_id.id
integration_id = "162001151631"
}
resource "random_id" "extrnal_id" {
@@ -9,13 +9,13 @@ resource "random_id" "extrnal_id" {
resource "aws_iam_role" "this" {
path = var.role_path
- name = "IT-Management-Cloud-Integration-Role"
- description = "IT Management Cloud Service use this role to integrate with AWS."
+ name = "Admina-Integration-Role"
+ description = "Admina Service use this role to integrate with AWS."
assume_role_policy = data.aws_iam_policy_document.trusted_policy.json
tags = merge(
var.additional_tags,
{
- "Name" = "IT Management Cloud Integration Role"
+ "Name" = "Admina Integration Role"
},
)
}
@@ -36,36 +36,62 @@ data "aws_iam_policy_document" "trusted_policy" {
}
}
resource "aws_iam_role_policy" "role_policy" {
- name = "IT-Management-Cloud-Integration-Role-Policy"
- role = aws_iam_role.this.id
- policy = data.aws_iam_policy_document.role_policy.json
+ name = "Admina-Integration-Role-Policy"
+ role = aws_iam_role.this.id
+ policy = var.read_only ? data.aws_iam_policy_document.read_only_role_policy.json : data.aws_iam_policy_document.role_policy.json
}
data "aws_iam_policy_document" "role_policy" {
statement {
- sid = "IntegrationAccessPolicy"
+ sid = "IntegrationAccessPolicy"
effect = "Allow"
actions = [
- "iam:GetAccessKeyLastUsed",
- "iam:ListAccessKeys",
- "iam:ListAttachedUserPolicies",
- "iam:ListGroupsForUser",
- "iam:ListMFADevices",
- "iam:ListRolePolicies",
- "iam:ListRoles",
- "iam:ListUsers",
- "iam:ListUserTags",
- "iam:DeleteUser",
- "iam:DeleteAccessKey",
- "iam:DeleteRole",
- "iam:ListAttachedRolePolicies",
- "iam:DetachRolePolicy",
- "iam:DeleteLoginProfile",
- "iam:ListAttachedUserPolicies",
- "iam:DetachUserPolicy",
- "account:GetContactInformation"
+ "iam:GetAccessKeyLastUsed",
+ "iam:ListAccessKeys",
+ "iam:ListAttachedUserPolicies",
+ "iam:ListGroupsForUser",
+ "iam:ListMFADevices",
+ "iam:ListRolePolicies",
+ "iam:ListRoles",
+ "iam:ListUsers",
+ "iam:ListUserTags",
+ "iam:DeleteUser",
+ "iam:DeleteAccessKey",
+ "iam:DeleteRole",
+ "iam:ListAttachedRolePolicies",
+ "iam:DetachRolePolicy",
+ "iam:DeleteLoginProfile",
+ "iam:ListAttachedUserPolicies",
+ "iam:DetachUserPolicy",
+ "iam:CreateUser",
+ "iam:TagUser",
+ "iam:ListUserPolicies",
+ "account:GetContactInformation"
]
resources = ["*"]
}
}
+data "aws_iam_policy_document" "read_only_role_policy" {
+ statement {
+ sid = "IntegrationAccessPolicy"
+ effect = "Allow"
+ actions = [
+ "iam:GetAccessKeyLastUsed",
+ "iam:ListAccessKeys",
+ "iam:ListAttachedUserPolicies",
+ "iam:ListGroupsForUser",
+ "iam:ListMFADevices",
+ "iam:ListRolePolicies",
+ "iam:ListRoles",
+ "iam:ListUsers",
+ "iam:ListUserTags",
+ "iam:ListAttachedRolePolicies",
+ "iam:ListAttachedUserPolicies",
+ "iam:TagUser",
+ "iam:ListUserPolicies",
+ "account:GetContactInformation"
+ ]
+ resources = ["*"]
+ }
+}
diff --git a/outputs.tf b/outputs.tf
index ff7e6ce..2de8c2e 100644
--- a/outputs.tf
+++ b/outputs.tf
@@ -1,9 +1,9 @@
output "role_arn" {
- value = aws_iam_role.this.arn
- description = "The output is the Arn of the Role that was created.
This value will be able to enter into IntegrationPage on ITMC"
+ value = aws_iam_role.this.arn
+ description = "The output is the Arn of the Role that was created.
This value will be able to enter into IntegrationPage on Admina"
}
output "external_id" {
- value = local.extrnal_id
- description = "The output is the External ID of the Role that was created.
This value will be able to enter into IntegrationPage on ITMC"
-}
\ No newline at end of file
+ value = local.extrnal_id
+ description = "The output is the External ID of the Role that was created.
This value will be able to enter into IntegrationPage on Admina"
+}
diff --git a/variables.tf b/variables.tf
index e12f679..6b62e96 100644
--- a/variables.tf
+++ b/variables.tf
@@ -5,8 +5,13 @@ variable "additional_tags" {
}
variable "role_path" {
- type = string
- default = "/integration/"
+ type = string
+ default = "/integration/"
description = "Path to place the Role."
}
+variable "read_only" {
+ type = bool
+ default = false
+ description = "If true, the role will be read only."
+}