aws_iam_user

Provides an IAM user.

Example Usage

resource "aws_iam_user" "lb" {
    name = "loadbalancer"
    path = "/system/"
}

resource "aws_iam_access_key" "lb" {
    user = "${aws_iam_user.lb.name}"
}

resource "aws_iam_user_policy" "lb_ro" {
    name = "test"
    user = "${aws_iam_user.lb.name}"
    policy = <<EOF
{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Action": [
        "ec2:Describe*"
      ],
      "Effect": "Allow",
      "Resource": "*"
    }
  ]
}
EOF
}

Argument Reference

The following arguments are supported:

  • name - (Required) The user's name.
  • path - (Optional, default "/") Path in which to create the user.
  • force_destroy - (Optional, default false) When destroying this user, destroy even if it has non-Terraform-managed IAM access keys. Without force_destroy a user with non-Terraform-managed access keys will fail to be destroyed.

Attributes Reference

The following attributes are exported:

  • unique_id - The unique ID assigned by AWS.
  • arn - The ARN assigned by AWS for this user.

Import

IAM Users can be imported using the name, e.g.

$ terraform import aws_iam_user.lb loadbalancer