terraform-provider/docs/resources/app_connection_aws.md

page_title, subcategory, description

page_title	subcategory	description
kms_app_connection_aws Resource - terraform-provider	App Connections	Create and manage AWS App Connection

kms_app_connection_aws (Resource)

Create and manage AWS App Connection

Example Usage

terraform {
  required_providers {
    kms = {
      # version = <latest version>
      source = "hanzokms/kms"
    }
  }
}

provider "kms" {
  host = "https://kms.hanzo.ai" # Only required if using self hosted instance of Hanzo KMS, default is https://kms.hanzo.ai
  auth = {
    universal = {
      client_id     = "<machine-identity-client-id>"
      client_secret = "<machine-identity-client-secret>"
    }
  }
}

resource "kms_app_connection_aws" "app-connection-aws-assume-role" {
  name   = "aws-assume-role-app-connection"
  method = "assume-role"
  credentials = {
    role_arn = "<assume role arn>"
  }
  description = "I am a test app connection"
}

resource "kms_app_connection_aws" "app-connection-aws-access-key" {
  name   = "aws-access-key-app-connection"
  method = "access-key"
  credentials = {
    access_key_id     = "<access-key-id>",
    secret_access_key = "<secret-access-key>",
  }
  description = "I am a test app connection"
}

Schema

Required

• credentials (Attributes) The credentials for the AWS App Connection (see below for nested schema)
• method (String) The method used to authenticate with AWS. Possible values are: assume-role, access-key
• name (String) The name of the AWS App Connection to create. Must be slug-friendly

Optional

• description (String) An optional description for the AWS App Connection.
• project_id (String) The ID of the project to scope the app connection to. If not provided, the app connection will be scoped to the organization.

Read-Only

• credentials_hash (String) The hash of the AWS App Connection credentials
• id (String) The ID of the app connection

Nested Schema for credentials

Optional:

• access_key_id (String, Sensitive) The AWS Access Key ID used to authenticate requests to AWS services. Required for access-key access method. For more details, refer to the documentation here hanzo.ai/docs/integrations/app-connections/aws#access-key
• role_arn (String, Sensitive) The Amazon Resource Name (ARN) of the IAM role to assume for performing operations. Hanzo KMS will assume this role using AWS Security Token Service (STS). Required for assume-role access method. For more details, refer to the documentation here hanzo.ai/docs/integrations/app-connections/aws#assume-role-recommended
• secret_access_key (String, Sensitive) The AWS Secret Access Key associated with the Access Key ID to authenticate requests to AWS services. Required for access-key access method. For more details, refer to the documentation here hanzo.ai/docs/integrations/app-connections/aws#access-key