Skip to content

geekcell/terraform-aws-iam-github-oidc-provider

Repository files navigation

Geek Cell GmbH

Code Quality

License GitHub release (latest tag) Release Validate Lint

Security

Infrastructure Tests

Cloud

Infrastructure Tests Infrastructure Tests Infrastructure Tests Infrastructure Tests Infrastructure Tests

Container

Infrastructure Tests Infrastructure Tests Infrastructure Tests Infrastructure Tests

Data protection

Infrastructure Tests Infrastructure Tests Infrastructure Tests Infrastructure Tests Infrastructure Tests Infrastructure Tests Infrastructure Tests

Terraform AWS IAM GitHub OIDC Provider

Introducing the AWS IAM OpenID Provider Terraform Module, a simple solution for creating and managing your IAM OpenID Connect (OIDC) providers within Amazon Web Services (AWS). This module has been designed with simplicity in mind, providing you with an easy way to create and manage your IAM OIDC providers.

Our team of experts has years of experience working with AWS IAM and has a deep understanding of the best practices and configurations. By using this Terraform module, you can be sure that your IAM OIDC providers are created and managed in a secure and efficient manner.

This module offers a preconfigured solution for creating an IAM OIDC provider with the correct settings for GitHub, allowing for role assumption via web tokens. This simplifies the process of securely integrating your AWS resources with GitHub, saving you time and effort in the process.

So, if you're looking for a convenient and reliable solution for creating and managing your IAM OIDC providers within AWS, look no further than the AWS IAM OpenID Provider Terraform Module. Give it a try and see how easy it is to integrate your AWS resources with GitHub!

https://docs.github.com/en/actions/deployment/security-hardening-your-deployments/configuring-openid-connect-in-amazon-web-services

Inputs

Name Description Type Default Required
client_ids The client IDs of the GitHub apps. list(string)
[
"sts.amazonaws.com"
]
no
provider_url The URL of the GitHub provider. string "https://token.actions.githubusercontent.com" no
tags Tags to add to the AWS Customer Managed Key. map(any) {} no
thumbprints The thumbprints of the GitHub provider. list(string)
[
"6938fd4d98bab03faadb97b34396831e3780aea1",
"1c58a3a8518e8759bf075b76b750d4f2df264fcd"
]
no

Outputs

Name Description
provider_arn The ARN of the OIDC provider.

Providers

Name Version
aws >= 4.36

Resources

  • resource.aws_iam_openid_connect_provider.main (main.tf#22)

Examples

Minimal

module "example" {
  source = "../../"
}