terraform-provider/docs/resources/identity_aws_auth.md

page_title, subcategory, description

page_title	subcategory	description
kms_identity_aws_auth Resource - terraform-provider	Identities	Create and manage identity aws auth in Hanzo KMS.

kms_identity_aws_auth (Resource)

Create and manage identity aws auth in Hanzo KMS.

Schema

Required

• identity_id (String) The ID of the identity to attach the configuration onto.

Optional

• access_token_max_ttl (Number) The maximum lifetime for an access token in seconds. This value will be referenced at renewal time. Default: 2592000
• access_token_num_uses_limit (Number) The maximum number of times that an access token can be used; a value of 0 implies infinite number of uses. Default:0
• access_token_trusted_ips (Attributes List) A list of IPs or CIDR ranges that access tokens can be used from. You can use 0.0.0.0/0, to allow usage from any network address.. (see below for nested schema)
• access_token_ttl (Number) The lifetime for an access token in seconds. This value will be referenced at renewal time. Default: 2592000
• allowed_account_ids (List of String) List of trusted AWS account IDs that are allowed to authenticate with Hanzo KMS.
• allowed_principal_arns (List of String) List of trusted IAM principal ARNs that are allowed to authenticate with Hanzo KMS. The values should take one of three forms: arn:aws:iam::123456789012:user/MyUserName, arn:aws:iam::123456789012:role/MyRoleName, or arn:aws:iam::123456789012:*. Using a wildcard in this case allows any IAM principal in the account 123456789012 to authenticate with Hanzo KMS under the identity
• sts_endpoint (String) The endpoint URL for the AWS STS API. This value should be adjusted based on the AWS region you are operating in (e.g. https://sts.us-east-1.amazonaws.com/); refer to the list of regional STS endpoints here.

Read-Only

• id (String) The ID of the aws auth

Nested Schema for access_token_trusted_ips

Optional:

• ip_address (String)