diff --git a/examples/service-linked-roles.tf b/examples/service-linked-roles.tf new file mode 100644 index 0000000..34dde8f --- /dev/null +++ b/examples/service-linked-roles.tf @@ -0,0 +1,10 @@ +resource "aws_iam_service_linked_role" "roles" { + for_each = toset(var.service_linked_roles) + aws_service_name = each.key + + tags = merge( + local.base_tags, + module.tags.tags, + module.tags.finops_roles["servicelinkedrole"], + ) +} diff --git a/examples/variables.service-linked-roles.auto.tfvars b/examples/variables.service-linked-roles.auto.tfvars new file mode 100644 index 0000000..a0460d8 --- /dev/null +++ b/examples/variables.service-linked-roles.auto.tfvars @@ -0,0 +1,4 @@ +service_linked_roles = [ + # "rds.amazonaws.com", + "malware-protection.guardduty.amazonaws.com", +] diff --git a/examples/variables.service-linked-roles.tf b/examples/variables.service-linked-roles.tf new file mode 100644 index 0000000..fc00253 --- /dev/null +++ b/examples/variables.service-linked-roles.tf @@ -0,0 +1,5 @@ +variable "service_linked_roles" { + description = "List of service linked role service name" + type = list(string) + default = [] +}