Skip to content

Commit

Permalink
export per-user list in aws_info
Browse files Browse the repository at this point in the history
  • Loading branch information
badra001 committed Aug 15, 2019
1 parent fdb9b79 commit bbfcfce
Show file tree
Hide file tree
Showing 2 changed files with 18 additions and 6 deletions.
8 changes: 8 additions & 0 deletions main.tf
Original file line number Diff line number Diff line change
Expand Up @@ -135,3 +135,11 @@ resource "aws_iam_access_key" "audit" {
pgp_key = var.pgp_key
}

resource "null_resource" "audit_output" {
count = length(var.users)
triggers = {
user = element(aws_iam_user.audit[*].name,count.index)
aws_access_key_id = element(aws_iam_access_key.audit[*].id,count.index)
aws_secret_access_key = element(aws_iam_access_key.audit[*].encrypted_secret,count.index)
}
}
16 changes: 10 additions & 6 deletions outputs.tf
Original file line number Diff line number Diff line change
@@ -1,24 +1,28 @@
output "user" {
description = "Users created"
value = [aws_iam_user.audit.*.name]
value = aws_iam_user.audit[*].name
}

output "aws_access_key_id" {
description = "Access Key IDs for Users"
value = aws_iam_access_key.audit.*.id
value = aws_iam_access_key.audit[*].id
}

locals {
encrypted_secret = join(",", aws_iam_access_key.audit.*.encrypted_secret)

# encrypted_secret = join(",", aws_iam_access_key.audit.*.encrypted_secret)
# encrypted_secret = "${join(",",aws_iam_access_key.audit.*.secret)}"
# notencrypted_secret = "${join(",",aws_iam_access_key.audit.*.secret)}"
# secret = "${var.pgp_key == "" ? local.notencrypted_secret : local.encrypted_secret}"
secret = local.encrypted_secret
# secret = local.encrypted_secret
}

output "aws_secret_access_key" {
description = "Access Secret Key IDs for Users"
value = [split(",", local.secret)]
# value = [split(",", local.secret)]
value = aws_iam_access_key.audit[*].encrypted_secret
}

output "aws_info" {
description = "Access key, secret, and user map output"
value = null_resource.audit_output[*].triggers
}

0 comments on commit bbfcfce

Please sign in to comment.