terraform-provider/docs/resources/identity_token_auth.md

page_title, subcategory, description

page_title	subcategory	description
kms_identity_token_auth Resource - terraform-provider	Identities	Create and manage identity token auth in Hanzo KMS.

kms_identity_token_auth (Resource)

Create and manage identity token auth in Hanzo KMS.

Example Usage

terraform {
  required_providers {
    kms = {
      # version = <latest version>
      source = "hanzokms/kms"
    }
  }
}

provider "kms" {
  host = "https://kms.hanzo.ai" # Only required if using self hosted instance of Hanzo KMS, default is https://kms.hanzo.ai
  auth = {
    universal = {
      client_id     = "<machine-identity-client-id>"
      client_secret = "<machine-identity-client-secret>"
    }
  }
}

resource "kms_identity" "machine-identity-1" {
  name   = "machine-identity-1"
  role   = "admin"
  org_id = "<your-org-id>"
}

resource "kms_identity_token_auth" "token-auth" {
  identity_id = kms_identity.machine-identity-1.id
}

Schema

Required

• identity_id (String) The ID of the identity to attach the configuration onto.

Optional

• access_token_max_ttl (Number) The maximum lifetime for an access token in seconds. This value will be referenced at renewal time. Default: 2592000
• access_token_num_uses_limit (Number) The maximum number of times that an access token can be used; a value of 0 implies infinite number of uses. Default:0
• access_token_trusted_ips (Attributes List) A list of IPs or CIDR ranges that access tokens can be used from. You can use 0.0.0.0/0, to allow usage from any network address... (see below for nested schema)
• access_token_ttl (Number) The lifetime for an access token in seconds. This value will be referenced at renewal time. Default: 2592000

Read-Only

• id (String) The ID of the token auth.

Nested Schema for access_token_trusted_ips

Optional:

• ip_address (String)

Import

Import is supported using the following syntax:

# This will import the resource by its identity ID
terraform import kms_identity_token_auth.example <identity_id>