Skip to content

Releases: cloudposse/terraform-aws-organization-access-group

0.5.0: Change role name to list of role arns (#13)

01 Apr 06:48
cef8062
Compare
Choose a tag to compare
* Change role name to list of role arns

0.4.0

13 Feb 16:52
9fa5ee2
Compare
Choose a tag to compare
Use non greedy aws_iam_user_group_membership (#12)

aws_iam_group_membership [1] is a greedy resource that can cause
inconsistent behaviour when adding a users in multiple places. The 
resource will conflict with itself if used more than once with the same
group. To non-exclusively manage the users in a group switch to the
aws_iam_user_group_membership [2] resource which can be used multiple 
times with the same user for non-overlapping groups.

Note that terraform-aws-iam-user [3] is using the 
aws_iam_user_group_membership resource. This mix is causing issues when 
running root account level Terraform. `users` is run and any subsequent 
runs of `iam` (which calls this module) is greedily removing users from
groups that were associated in the `users` run.

[1] https://www.terraform.io/docs/providers/aws/r/iam_group_membership.html
[2] https://www.terraform.io/docs/providers/aws/r/iam_user_group_membership.html
[3] https://github.com/cloudposse/terraform-aws-iam-user/blob/master/main.tf#L20-L25

0.3.0: Add Switch Role URL Output (#11)

02 Jan 15:48
d69f938
Compare
Choose a tag to compare
* Update README

* Support enabled flag for new output

0.2.1

20 Dec 21:36
Compare
Choose a tag to compare
Update readme yaml file and rebuild md (#8)

0.2.0

20 Dec 16:25
8a5424b
Compare
Choose a tag to compare
Add enabled var to booloean creation of resources (#10)

This commit adds an “enabled” flag and defaults to true.

Regenerate README.md

27 Jul 13:57
ae422cd
Compare
Choose a tag to compare

what

  • Regenerate README.md

why

  • Previous version of build-harness has some typos

Migrate to README.yaml format

19 Jul 09:19
82c7c0a
Compare
Choose a tag to compare

what

  • Add README.yaml

why

  • Standardize README

0.1.3

12 Apr 05:59
18ee773
Compare
Choose a tag to compare

what

  • Add flag to require users to have MFA enabled

why

  • For some use-cases we need to require the users in the master account to have MFA enabled to access the member accounts

0.1.2

27 Mar 01:04
1dd369a
Compare
Choose a tag to compare

what

Don't include resource types in resource names

why

Follow the common pattern of naming resources

0.1.1

22 Mar 17:55
7a91ef4
Compare
Choose a tag to compare

what

  • Auto-generate Group and Policy names

why

  • This is a generic pattern to name created resources
  • Don't require the operators of the module to choose the names