Question : The Nautilus DevOps team is automating IAM role creation using Terraform to streamline permissions management. As part of this task, they need to create an IAM role with specific requirements.
For this task, create an AWS IAM role using Terraform with the following requirements:
The IAM role name iamrole_kirsty should be stored in a variable named KKE_iamrole.
Note:
1. The configuration values should be stored in a variables.tf file.
2. The Terraform script should be structured with a main.tf file referencing variables.tf.
The Terraform working directory is /home/bob/terraform.
Right-click under the EXPLORER section in VS Code and select Open in Integrated Terminal to launch the terminal.
1. In VS Code Editor create a new file main.tf
(Refer Video below for better understanding )
Code you will get on Git Lab repository
https://gitlab.com/nb-tech-support/devops/-/blob/master/Terraform
Main.tf
resource "aws_iam_role" "this" {
name = var.KKE_iamrole
assume_role_policy = jsonencode({
Version = "2012-10-17"
Statement = [
{
Effect = "Allow"
Principal = {
Service = "ec2.amazonaws.com"
}
Action = "sts:AssumeRole"
}
]
})
tags = {
Name = var.KKE_iamrole
}
} |
# Define variable for IAM role name
variable "KKE_iamrole" {
description = "The name of the IAM role to create"
type = string
default = "iamrole_kirsty"
} |
terraform init terraform plan terraform apply |
3. Click on Finish & Confirm to complete the task successful
Happy Learning!!!!
0 Comments