diff --git a/rolesanywhere/README.md b/rolesanywhere/README.md index cd09911..64918c1 100644 --- a/rolesanywhere/README.md +++ b/rolesanywhere/README.md @@ -107,6 +107,7 @@ module "myrole3" { | [component\_tags](#input\_component\_tags) | Additional tags for Components (role, policy) | `map(map(string))` |
{
"policy": {},
"role": {}
} | no |
| [contact\_group\_email](#input\_contact\_group\_email) | Email of contact group | `string` | n/a | yes |
| [contact\_users](#input\_contact\_users) | Username of contact(s) | `list(string)` | `[]` | no |
+| [import\_to\_acm](#input\_import\_to\_acm) | Flag to import certificate to ACM, used primarily for tracking expiration and establishing contact details | `bool` | `false` | no |
| [inline\_policies](#input\_inline\_policies) | List of IAM Policy Document objects to include in this role. Format is {name=name,policy=policy-json} | `list(object({ name = string, policy = string }))` | `[]` | no |
| [managed\_policy\_arns](#input\_managed\_policy\_arns) | List of IAM Managed Policy ARNs to attach to this role | `list(string)` | `[]` | no |
| [max\_session\_duration](#input\_max\_session\_duration) | Override the maximum session duration from the default (3600) | `number` | `3600` | no |
diff --git a/rolesanywhere/certificate.tf b/rolesanywhere/certificate.tf
index a11d188..7fc0436 100644
--- a/rolesanywhere/certificate.tf
+++ b/rolesanywhere/certificate.tf
@@ -5,6 +5,7 @@ module "certificate" {
contact_email = var.contact_group_email
certificate_subject_ou = local.certificate_subject_ou["x509Subject/OU"]
validity_days = var.validity_days
+ import_to_acm = var.import_to_acm
}
locals {
diff --git a/rolesanywhere/variables.tf b/rolesanywhere/variables.tf
index 1131056..45269f1 100644
--- a/rolesanywhere/variables.tf
+++ b/rolesanywhere/variables.tf
@@ -44,3 +44,9 @@ variable "component_tags" {
type = map(map(string))
default = { "role" = {}, "policy" = {} }
}
+
+variable "import_to_acm" {
+ description = "Flag to import certificate to ACM, used primarily for tracking expiration and establishing contact details"
+ type = bool
+ default = false
+}