part7 (1)

Deploy AWS IAM User, Group & Policy Using Terraform

by
with 121 comments
Terraform

Welcome back to the series of Deploying On AWS Cloud Using Terraform 👨🏻‍💻. In this entire series, we will focus on our core concepts of Terraform by launching important basic services from scratch which will take your infra-as-code journey from beginner to advanced. This series would start from beginner to advance with real life Usecases and Youtube Tutorials.

If you are a beginner for Terraform and want to start your journey towards infra-as-code developer as part of your devops role buckle up 🚴‍♂️ and lets get started and understand core Terraform concepts by implementing it…🎬

Let’s understand it in 2 scenarios

  1. Create 5 IAM users and a Developer group, and align all users as part of this Developer Group.

  2. Create IAM Policies and assign this to the Developer group.

🔎Basic Terraform Configurations🔍

As part of basic configuration we are going to setup 3 terraform files

1. Providers File:- Terraform relies on plugins called “providers” to interact with cloud providers, SaaS providers, and other APIs.

Providers are distributed separately from Terraform itself, and each provider has its own release cadence and version numbers.
The Terraform Registry is the main directory of publicly available Terraform providers, and hosts providers for most major infrastructure platforms. Each provider has its own documentation, describing its resource types and their arguments.
We would be using AWS Provider for our terraform series. Make sure to refer Terraform AWS documentation for up-to-date information.
Provider documentation in the Registry is versioned; you can use the version menu in the header to change which version you’re viewing.

 provider "aws" { 
 region = "var.AWS_REGION" 
 shared_credentials_file = "" 
 }

2. Variables File:- Terraform variables lets us customize aspects of Terraform modules without altering the module’s own source code. This allows us to share modules across different Terraform configurations, reusing same data at multiple places.

When you declare variables in the root terraform module of your configuration, you can set their values using CLI options and environment variables. When you declare them in child modules, the calling module should pass values in the module block.

 variable "AWS_REGION" { 
 variable "AWS_REGION" { 
 default = "us-east-1" 
 }

3. Versions File:- It’s always a best practice to maintain a version file where you specific version based on which your stack is testing and live on production.

 terraform { 
 required_version = ">= 0.12" 
 }

Let’s create a variable to type a list to pass our user names for whom the IAM user profile needs to be created in AWS.

variable "usernames" {
  type = list(string)
  default = ["Dheeraj","Sandip","Avinash","Vishal","Sankalp"]
}

✦ aws_iam_user:- This resource is used to create an AWS IAM user.

✦ name:- This is a mandatory argument to define user name as part of resource creation.
✦ count:- Variable to take the length of the user list and save it.
✦ element:- It’s an intrinsic function of terraform to retrieve a single element from a list.

resource "aws_iam_user" "userlist" {
  count = "${length(var.username)}"
  name = "${element(var.username,count.index )}"
}

✦ aws_iam_group:- This resource is used to create an AWS IAM group.

✦ name:- This is a mandatory argument to define group name as part of resource creation.

resource "aws_iam_group" "dev_group" {
  name = "Developer"
}

✦ aws_iam_user_group_membership:- This resource is used to associate AWS IAM users to single or multiple groups.

✦ name:- This is a mandatory argument to define this group membership association.
✦ user:- This is a mandatory argument to provide a list of users to be associated with the group.
✦ groups:- This is a mandatory argument to provide a list of groups to be associated.
✦ count:- Variable to take the length of the user list and save it.
✦ element:- It’s an intrinsic function of terraform to retrieve a single element from a list.

resource "aws_iam_user_group_membership" "user_group_membership" {
  count  = length(var.username)
  user   = element(var.username, count.index)
  groups = [aws_iam_group.dev_group.name, ]
}

✦ aws_iam_policy:- This resource is used to create IAM policy and define JSON policy within it.

✦ name:- This is an optional argument to define the IAM policy name.
✦ description:- This is an optional argument to provide more details about the IAM policy.
✦ policy:- This is a mandatory argument to JSON policy document.

resource "aws_iam_policy" "dev_group_policy" {
  name        = "dev-policy"
  description = "My test policy"
  policy = jsonencode({
    Version = "2012-10-17"
    Statement = [
      {
        Action = [
          "ec2:Describe*",
          "ec2:Get*",
        ]
        Effect   = "Allow"
        Resource = "*"
      },
    ]
  })
}

✦ aws_iam_group_policy_attachment:- This resource is used to attach the AWS IAM policy to the group.

✦ group:- This is a mandatory argument to provide the name of the group to which the policy needs to be attached.
✦ policy_arn:- This is a mandatory argument to provide AWS IAM policy arn which needs to be associated with the group.

resource "aws_iam_group_policy_attachment" "custom_policy" {
  group      = aws_iam_group.dev_group.name
  policy_arn = aws_iam_policy.dev_group_policy.arn
}

Output values make information about your infrastructure available on the command line, and can expose information for other Terraform configurations to use. Output values are similar to return values in programming languages.

output "user_arn" {
  description = "Provide the IAM user names which are created as part of this resource"
  value = aws_iam_user.userlist.*.arn
}
output "dev-group-id" {
  value       = aws_iam_group.dev_group.id
  description = "A reference to the created IAM group"
}

🔊To view the entire GitHub code click here

  1️⃣ The terraform fmt command is used to rewrite Terraform configuration files to a canonical format and style👨‍💻.

terraform fmt

2️⃣ Initialize the working directory by running the command below. The initialization includes installing the plugins and providers necessary to work with resources. 👨‍💻

terraform init

3️⃣ Create an execution plan based on your Terraform configurations. 👨‍💻

terraform plan

4️⃣ Execute the execution plan that the terraform plan command proposed. 👨‍💻

terraform apply --auto-approve

⛔️ Hashicorp Terraform
⛔️ AWS CLI
⛔️ Hashicorp Terraform Extension Guide
⛔️ Terraform Autocomplete Extension Guide
⛔️ AWS IAM Policy
⛔️ IAM Policy Group Attachment
⛔️ AWS IAM Group Membership
⛔️ AWS IAM Group
⛔️ AWS IAM User

In this blog, we have configured the below resources
✦ AWS IAM User.
✦ AWS IAM Group.
✦ AWS IAM Policy.
I have also referenced what arguments and documentation we are going to use so that while you are writing the code it would be easy for you to understand terraform official documentation. Stay with me for the next blog where we will be doing deep dive into Target Group, Elastic Load Balancer & ELB Listener Using Terraform.

📢 Stay tuned for my next blog…..

So, did you find my content helpful? If you did or like my other content, feel free to buy me a coffee. Thanks

Dheeraj_Pic1 (2)

Author - Dheeraj Choudhary

I am an IT Professional with 11+ years of experience specializing in DevOps & Build and Release Engineering, Software configuration management in automating, build, deploy and release. I blog about AWS and DevOps on my YouTube channel, which focuses on content such as, AWS, DevOps, open source, AI-ML and AWS community activities.
  • Share On:

RELATED ARTICLES

AWS Glue Presentation (1)

Automate S3 Data ETL Pipelines With AWS Glue Using Terraform

Discover how to automate your S3 data ETL pipelines using AWS Glue and Terraform in this step-by-step tutorial. Learn to efficiently manage and process your data, leveraging the power of AWS Glue for seamless data transformation. Follow along as we demonstrate how to set up Terraform scripts, configure AWS Glue, and automate data workflows.

121 Responses

  1. escape room lista

    hey there and thank you for your info – I have certainly picked up anything
    new from right here. I did however expertise some technical points using this site, as I experienced to reload the
    website many times previous to I could get it to load correctly.
    I had been wondering if your web host is OK? Not that I am complaining,
    but sluggish loading instances times will often affect
    your placement in google and could damage your quality score if advertising and marketing with Adwords.

    Anyway I’m adding this RSS to my email and could look out for much
    more of your respective exciting content. Make sure you update this again soon..
    Escape roomy lista

  4. Fort lauderdale

    I’m amazed, I must say. Seldom do I encounter a blog that’s equally educative and entertaining, and without a doubt, you have hit the nail on the head. The issue is something which not enough people are speaking intelligently about. Now i’m very happy I stumbled across this during my search for something relating to this.

  5. vents

    Hi, I do think this is an excellent site. I stumbledupon it 😉 I may return yet again since I book marked it. Money and freedom is the greatest way to change, may you be rich and continue to guide others.

  8. Klikx

    Hello! I could have sworn I’ve been to your blog before but after looking at some of the posts I realized it’s new to me. Anyhow, I’m definitely happy I discovered it and I’ll be bookmarking it and checking back frequently.

  10. Intex Pharma

    A fascinating discussion is worth comment. There’s no doubt that that you should write more about this issue, it may not be a taboo matter but usually people do not discuss such subjects. To the next! Best wishes!

  14. muruku

    Aw, this was an exceptionally good post. Finding the time and actual effort to produce a good article… but what can I say… I procrastinate a lot and never manage to get nearly anything done.

  16. porn stucker

    I’m impressed, I must say. Seldom do I come across a blog that’s both educative and entertaining, and without a doubt, you’ve hit the nail on the head. The problem is something which too few men and women are speaking intelligently about. Now i’m very happy that I stumbled across this during my hunt for something regarding this.

  17. iptv

    Right here is the perfect web site for everyone who wishes to find out about this topic. You know so much its almost tough to argue with you (not that I really will need to…HaHa). You definitely put a brand new spin on a subject that’s been written about for many years. Wonderful stuff, just excellent.

  20. iptv

    I would like to thank you for the efforts you’ve put in penning this blog. I’m hoping to check out the same high-grade content from you later on as well. In fact, your creative writing abilities has encouraged me to get my very own site now 😉

  22. iptv

    This is a really good tip especially to those new to the blogosphere. Brief but very accurate info… Appreciate your sharing this one. A must read article.

  23. iptv

    Howdy, I believe your site could possibly be having browser compatibility problems. Whenever I look at your site in Safari, it looks fine however when opening in Internet Explorer, it has some overlapping issues. I just wanted to provide you with a quick heads up! Apart from that, excellent site!

  24. CASINO5588

    You are so awesome! I do not believe I’ve read a single thing like this before. So good to find someone with some unique thoughts on this topic. Seriously.. many thanks for starting this up. This site is one thing that is required on the internet, someone with a little originality.

  25. 33win

    I wanted to thank you for this good read!! I definitely loved every little bit of it. I’ve got you saved as a favorite to check out new things you post…

  26. M88

    Hi, I do believe this is an excellent site. I stumbledupon it 😉 I am going to come back yet again since i have bookmarked it. Money and freedom is the best way to change, may you be rich and continue to help other people.

  27. shakibalhasan

    Next time I read a blog, Hopefully it doesn’t fail me as much as this particular one. I mean, Yes, it was my choice to read through, nonetheless I really thought you would probably have something useful to talk about. All I hear is a bunch of complaining about something that you can fix if you weren’t too busy seeking attention.

  29. mibet

    I was pretty pleased to uncover this page. I wanted to thank you for your time for this wonderful read!! I definitely liked every little bit of it and i also have you book marked to see new stuff in your blog.

  33. iptv

    An outstanding share! I’ve just forwarded this onto a co-worker who had been doing a little research on this. And he actually bought me dinner simply because I discovered it for him… lol. So let me reword this…. Thanks for the meal!! But yeah, thanks for spending the time to talk about this subject here on your web site.

  34. baby turbans for newborns

    The very next time I read a blog, I hope that it does not disappoint me as much as this particular one. I mean, I know it was my choice to read, nonetheless I genuinely thought you’d have something useful to talk about. All I hear is a bunch of complaining about something you could fix if you weren’t too busy looking for attention.

  35. top88bet

    I’m impressed, I have to admit. Seldom do I encounter a blog that’s both equally educative and entertaining, and without a doubt, you have hit the nail on the head. The issue is something that not enough folks are speaking intelligently about. I’m very happy that I found this during my hunt for something regarding this.

  36. Whitescreen49

    Hi, I do think this is a great web site. I stumbledupon it 😉 I may revisit yet again since i have saved as a favorite it. Money and freedom is the best way to change, may you be rich and continue to guide other people.

  37. Sohaib mufti

    May I simply say what a relief to uncover a person that actually understands what they’re discussing over the internet. You definitely understand how to bring a problem to light and make it important. A lot more people should check this out and understand this side of your story. It’s surprising you are not more popular given that you definitely possess the gift.

  39. 카지노 사이트 꽁머니

    I’m amazed, I must say. Rarely do I come across a blog that’s both equally educative and entertaining, and let me tell you, you’ve hit the nail on the head. The issue is something which not enough people are speaking intelligently about. I am very happy I stumbled across this in my search for something regarding this.

  40. high waisted jeans suppliers

    May I just say what a comfort to uncover someone who really knows what they’re discussing on the net. You definitely understand how to bring a problem to light and make it important. More and more people have to read this and understand this side of your story. I can’t believe you are not more popular since you most certainly possess the gift.

  41. Whitescreen58

    Good day! I just wish to offer you a big thumbs up for the excellent information you have got right here on this post. I will be coming back to your web site for more soon.

  42. promo code hellcase

    I would like to thank you for the efforts you’ve put in writing this website. I really hope to view the same high-grade content from you later on as well. In fact, your creative writing abilities has motivated me to get my very own blog now 😉

  45. cheap webcam sex

    Aw, this was an incredibly good post. Spending some time and actual effort to produce a top notch article… but what can I say… I hesitate a whole lot and don’t seem to get nearly anything done.

  46. good88

    Right here is the right webpage for anybody who hopes to understand this topic. You realize a whole lot its almost tough to argue with you (not that I really will need to…HaHa). You certainly put a brand new spin on a topic that has been discussed for years. Great stuff, just great.

  48. jeans wholesalers

    Hi there! This blog post could not be written much better! Going through this article reminds me of my previous roommate! He constantly kept talking about this. I’ll send this article to him. Pretty sure he’s going to have a great read. I appreciate you for sharing!

  50. shopdecordeals

    Aw, this was an extremely good post. Spending some time and actual effort to make a really good article… but what can I say… I procrastinate a whole lot and don’t seem to get anything done.

  52. ngentot

    Oh my goodness! Awesome article dude! Thank you, However I am having difficulties with your RSS. I don’t know the reason why I am unable to subscribe to it. Is there anyone else getting the same RSS issues? Anybody who knows the solution can you kindly respond? Thanx!

  53. sex

    After looking at a few of the articles on your website, I really appreciate your way of blogging. I book-marked it to my bookmark site list and will be checking back soon. Please visit my web site as well and tell me what you think.

  59. r6 Marketplace

    Hi there! This article could not be written much better! Looking at this article reminds me of my previous roommate! He continually kept preaching about this. I am going to forward this article to him. Pretty sure he’ll have a very good read. I appreciate you for sharing!

  61. game of thrones season 1

    After I initially commented I appear to have clicked the -Notify me when new comments are added- checkbox and from now on whenever a comment is added I receive 4 emails with the same comment. There has to be an easy method you are able to remove me from that service? Thank you.

  65. remember war of the son ตอนที่ 1 123

    Can I simply say what a relief to uncover an individual who truly understands what they are talking about on the net. You certainly understand how to bring a problem to light and make it important. More people really need to read this and understand this side of your story. It’s surprising you’re not more popular given that you most certainly have the gift.

  71. chicago pd season6

    After looking at a few of the blog posts on your blog, I seriously like your technique of writing a blog. I added it to my bookmark website list and will be checking back soon. Please visit my web site as well and let me know what you think.

  72. pet automatic feeder

    An impressive share! I have just forwarded this onto a co-worker who has been doing a little research on this. And he actually bought me lunch due to the fact that I found it for him… lol. So allow me to reword this…. Thank YOU for the meal!! But yeah, thanks for spending time to discuss this matter here on your internet site.

  75. Pastor Adeboye

    Your style is so unique in comparison to other people I’ve read stuff from. Many thanks for posting when you’ve got the opportunity, Guess I’ll just bookmark this web site.

  82. Flights

    That is a good tip especially to those new to the blogosphere. Simple but very accurate info… Many thanks for sharing this one. A must read post.

  85. the uncanny counter 2 2023

    You are so cool! I do not think I have read through anything like that before. So wonderful to find somebody with original thoughts on this issue. Really.. thanks for starting this up. This site is something that’s needed on the internet, someone with a bit of originality.

  86. google spam

    Hi there, I think your site may be having web browser compatibility problems. When I take a look at your site in Safari, it looks fine however, when opening in IE, it has some overlapping issues. I merely wanted to give you a quick heads up! Apart from that, wonderful website.

  87. 물뽕판매사이트

    I’m amazed, I must say. Seldom do I encounter a blog that’s both equally educative and interesting, and without a doubt, you’ve hit the nail on the head. The issue is an issue that not enough folks are speaking intelligently about. I’m very happy I came across this during my hunt for something relating to this.

  91. CarlosARODO

    Na teto strance najdete skvele kurzy pro vsechny hlavni sporty. Platforma pravidelne pridava nove hry do sve nabidky. Muzete sledovat zive prenosy a zaroven sazet na vysledky. Registrace vam otevre pristup k rade skvelych her a vyhod. Tento web nabizi take virtualni sporty a e-sporty. Melbet V nabidce jsou take ruzne bonusy pro nove i stavajici hrace. Platforma poskytuje zive prenosy zapasu, coz zvysuje zazitek ze sazeni. Portal poskytuje stedre bonusy a promoakce. Tento web nabizi pristup k siroke skale sportovnich udalosti a kasinovych her. Kazdy den jsou k dispozici nove sazkove prilezitosti. Tento online portal nabizi hry od prednich svetovych poskytovatelu. Muzete sazet na sve oblibene tymy a sportovce. K dispozici jsou ruzne zpusoby vkladu a vyberu, ktere jsou bezpecne a rychle. Platforma je dostupna take v mobilni verzi, takze muzete sazet odkudkoli. Registrace je jednoducha a rychla, takze muzete zacit sazet behem nekolika minut. Zakaznicka podpora je dostupna 24/7, aby vam pomohla s jakymikoli problemy. Muzete se tesit na vysoke vyhry a sirokou nabidku her. Sazeni v realnem case je jednou z hlavnich vyhod teto platformy. Tato platforma umoznuje sazeni na ruzne sportovni udalosti. Uzivatele si mohou uzit ruzne kasinove hry s vysokymi vyhrami.

  99. sky88

    Your style is unique in comparison to other folks I have read stuff from. Thanks for posting when you’ve got the opportunity, Guess I’ll just bookmark this site.

  100. sunwin

    Your style is unique in comparison to other folks I have read stuff from. Thanks for posting when you’ve got the opportunity, Guess I’ll just bookmark this site.

  102. Pero Treday

    I came across your site wanting to learn more and you did not disappoint. Keep up the terrific work, and just so you know, I have bookmarked your page to stay in the loop of your future posts. Here is mine at UQ4 about Cosmetics. Have a wonderful day!

  103. KingGame

    I’m extremely pleased to discover this great site. I need to to thank you for ones time due to this wonderful read!! I definitely liked every little bit of it and i also have you saved as a favorite to look at new stuff in your site.

  104. Bedpage

    I have to thank you for the efforts you have put in writing this site. I really hope to check out the same high-grade content by you in the future as well. In fact, your creative writing abilities has motivated me to get my own, personal site now 😉

  105. Salon in jaipur

    Howdy! This blog post couldn’t be written much better! Looking through this post reminds me of my previous roommate! He always kept preaching about this. I am going to send this article to him. Pretty sure he will have a great read. Thank you for sharing!

  106. Auto Sofortkauf Wien

    Oh my goodness! Impressive article dude! Thank you so much, However I am going through problems with your RSS. I don’t understand why I am unable to subscribe to it. Is there anyone else getting identical RSS problems? Anyone that knows the solution can you kindly respond? Thanx!

  107. Secure and privacy PDF

    After going over a handful of the blog articles on your site, I really like your technique of blogging. I bookmarked it to my bookmark site list and will be checking back soon. Take a look at my web site too and let me know what you think.

  108. BedPage Harrington Delaware

    Greetings, There’s no doubt that your website could possibly be having web browser compatibility issues. When I take a look at your web site in Safari, it looks fine but when opening in I.E., it has some overlapping issues. I just wanted to provide you with a quick heads up! Other than that, excellent website.

  109. genshin impact fps unlocker

    Having read this I thought it was really informative. I appreciate you spending some time and effort to put this short article together. I once again find myself personally spending way too much time both reading and posting comments. But so what, it was still worthwhile.

  117. Fa88

    Hello! I could have sworn I’ve visited this site before but after looking at many of the posts I realized it’s new to me. Regardless, I’m certainly happy I came across it and I’ll be book-marking it and checking back regularly!

  118. pabrik toto slot

    I’m more than happy to find this page. I wanted to thank you for ones time for this particularly wonderful read!! I definitely loved every part of it and i also have you bookmarked to see new stuff in your website.

  119. 学生ビザ

    Aw, this was an extremely nice post. Taking a few minutes and actual effort to produce a top notch article… but what can I say… I hesitate a lot and don’t seem to get anything done.

  121. mosaic-lamp

    May I just say what a relief to discover someone who genuinely understands what they’re talking about on the web. You certainly understand how to bring a problem to light and make it important. More and more people really need to check this out and understand this side of the story. I can’t believe you are not more popular because you surely possess the gift.

Add a Comment

Your email address will not be published. Required fields are marked *