upstream/vault
1
0
Fork 0
mirror of https://github.com/hashicorp/vault.git synced 2026-02-03 20:40:45 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions 11

VAULT-35642: Adding comments for Enos premade aws role and policy (#30731)

Browse source 
* adding comments for premade aws role and policy

* fixing comments
This commit is contained in:
Tin Vo 2025-05-23 12:40:00 -07:00 committed by GitHub
parent 9c05e763d0
commit d7bb0adfe0
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 7 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
enos/modules/verify_secrets_engines/modules/create/aws/aws.tf
View file

@ -76,11 +76,16 @@ data "aws_caller_identity" "current" {}
data "aws_region" "current" {}
# Using Pre-made policy and role
# The "DemoUser" policy is a predefined policy created by the security team.
# This policy grants the necessary AWS permissions required for role generation via Vault.
# Reference: https://github.com/hashicorp/honeybee-templates/blob/main/templates/iam_policy/DemoUser.yaml
data "aws_iam_policy" "premade_demo_user_policy" {
name = "DemoUser"
}
# This role was provisioned by the security team using the repository referenced below.
# This role includes the necessary policies to enable AWS credential generation and rotation via Vault.
# Reference: https://github.com/hashicorp/honeybee-templates/blob/main/templates/iam_role/vault-assumed-role-credentials-demo.yaml
data "aws_iam_role" "premade_demo_assumed_role" {
name = "vault-assumed-role-credentials-demo"
}

2
enos/modules/verify_secrets_engines/modules/read/aws/aws.tf
View file

@ -42,7 +42,7 @@ variable "verify_aws_engine_creds" {
type = bool
}
# Verify PKI Certificate
# Verify AWS Engine
resource "enos_remote_exec" "aws_verify_new_creds" {
for_each = var.hosts