AWS IAM Account

aws_organizations_account (Terraform)

The Account in IAM can be configured in Terraform with the resource name aws_organizations_account. The following sections describe 5 examples of how to use the resource and its parameters.

Example Usage from GitHub

alessanderviana/its-poc

resource "aws_organizations_account" "developer_account" {
  name  = "developer-account"
  email = "developer-account@its.org"

  # Parent Organizational Unit ID
  # Defaults to the Organization default Root ID

petersiemen/aws-multiple-account-ci-cd

resource "aws_organizations_account" "shared-services" {
  name = "shared-services"
  email = var.shared_services_account_email
}

#terragrunt import aws_organizations_account.development xxxxx

petersiemen/cross-account-multi-region-ci-cd-pipeline-on-aws

resource "aws_organizations_account" "shared-services" {
  name = "shared-services"
  email = var.shared_services_account_email
}

#terragrunt import aws_organizations_account.development xxxxx

thilinajayanath/thesis

resource "aws_organizations_account" "cd" {
  name  = "thilina-thesis-cd"
  email = "dummyuser+cd@gmail.com"
}

resource "aws_organizations_account" "logging" {

ObjectTechnica/effective-carnival

resource "aws_organizations_account" "logging" {
  name      = var.log_name
  email     = var.log_email
  role_name = var.role_name
  parent_id = var.managed_parent
}

Parameters

• arn optional computed - string
• email required - string
• iam_user_access_to_billing optional - string
• id optional computed - string
• joined_method optional computed - string
• joined_timestamp optional computed - string
• name required - string
• parent_id optional computed - string
• role_name optional - string
• status optional computed - string
• tags optional - map from string to string

Explanation in Terraform Registry

Provides a resource to create a member account in the current organization.

Note: Account management must be done from the organization's master account. !> WARNING: Deleting this Terraform resource will only remove an AWS account from an organization. Terraform will not close the account. The member account must be prepared to be a standalone account beforehand. See the AWS Organizations documentation for more information.

Tips: Best Practices for The Other AWS IAM Resources

In addition to the aws_iam_account_password_policy, AWS IAM has the other resources that should be configured for security reasons. Please check some examples of those resources and precautions.

aws_iam_account_password_policy

Ensure AWS IAM account password policies requires long passwords

It's better to enforce the use of long and complex passwords to reduce the risk of bruteforce attacks.