diff --git a/rolesanywhere/README.md b/rolesanywhere/README.md index cd09911..64918c1 100644 --- a/rolesanywhere/README.md +++ b/rolesanywhere/README.md @@ -107,6 +107,7 @@ module "myrole3" { | [component\_tags](#input\_component\_tags) | Additional tags for Components (role, policy) | `map(map(string))` |
{
"policy": {},
"role": {}
}
| no | | [contact\_group\_email](#input\_contact\_group\_email) | Email of contact group | `string` | n/a | yes | | [contact\_users](#input\_contact\_users) | Username of contact(s) | `list(string)` | `[]` | no | +| [import\_to\_acm](#input\_import\_to\_acm) | Flag to import certificate to ACM, used primarily for tracking expiration and establishing contact details | `bool` | `false` | no | | [inline\_policies](#input\_inline\_policies) | List of IAM Policy Document objects to include in this role. Format is {name=name,policy=policy-json} | `list(object({ name = string, policy = string }))` | `[]` | no | | [managed\_policy\_arns](#input\_managed\_policy\_arns) | List of IAM Managed Policy ARNs to attach to this role | `list(string)` | `[]` | no | | [max\_session\_duration](#input\_max\_session\_duration) | Override the maximum session duration from the default (3600) | `number` | `3600` | no | diff --git a/rolesanywhere/certificate.tf b/rolesanywhere/certificate.tf index a11d188..7fc0436 100644 --- a/rolesanywhere/certificate.tf +++ b/rolesanywhere/certificate.tf @@ -5,6 +5,7 @@ module "certificate" { contact_email = var.contact_group_email certificate_subject_ou = local.certificate_subject_ou["x509Subject/OU"] validity_days = var.validity_days + import_to_acm = var.import_to_acm } locals { diff --git a/rolesanywhere/variables.tf b/rolesanywhere/variables.tf index 1131056..45269f1 100644 --- a/rolesanywhere/variables.tf +++ b/rolesanywhere/variables.tf @@ -44,3 +44,9 @@ variable "component_tags" { type = map(map(string)) default = { "role" = {}, "policy" = {} } } + +variable "import_to_acm" { + description = "Flag to import certificate to ACM, used primarily for tracking expiration and establishing contact details" + type = bool + default = false +}