Home / server / Questions / 1081910
In Process
uday kiran
Asked: 2021-10-28 08:39:10 +0800 CST

What policies or rights to be provided for a user with which we will run the terraform scripts?

  • 772

We are creating eks clusters and other resources from terraform.

What are the policies to be given to that user account?

amazon-web-services terraform

1 Answers

  1. The answer is: it fully depends on your needs.

    If you're running Terraform on CodeBuild or ECS and have configured an IAM Task Role, Terraform will use the container's Task Role.

    If you're running Terraform on EKS and have configured IAM Roles for Service Accounts (IRSA), Terraform will use the pod's role.

    See AWS Identity and Access Management Documentation for always up to date information and test your policies with the help of IAM policy simulator.

    However, from my experience it is much easier to use AWS managed policies than to write policies yourself - see AWS managed policies for Amazon Elastic Kubernetes Service for an overview.

    • 2