standard
turbot/aws_compliance

Pipeline: Correct one IAM account without support role

Runs corrective action for an IAM account to create a new support role.

Run the pipeline

To run this pipeline from your terminal:

flowpipe pipeline run aws_compliance.pipeline.correct_one_iam_accounts_without_support_role \
--arg 'title=<string>' \
--arg 'account_id=<string>' \
--arg 'user_arn=<string>' \
--arg 'conn=<connection.aws>'

Use this pipeline

To call this pipeline from your pipeline, use a step:

step "pipeline" "step_name" {
pipeline = aws_compliance.pipeline.correct_one_iam_accounts_without_support_role
args = {
title = <string>
account_id = <string>
user_arn = <string>
conn = <connection.aws>
}
}

Params

NameTypeRequiredDescriptionDefault
title
string
YesTitle of the resource, to be used as a display name.-
account_id
string
YesThe account ID of the AWS account.-
user_arn
string
YesSpecifies the IAM user arn to be used for creating the support role.-
support_role_name
string
YesSpecifies the IAM support role that will be created.flowpipe-aws-support-access
conn
connection.aws
YesName of the AWS connection to be used for any authenticated actions.-
notifier
notifier
YesThe name of the notifier to use for sending notification messages.notifier.default
notification_level
string
verbose, info, error
YesThe verbosity level of notification messages to send.info
approvers
list(notifier)
YesList of notifiers to be used for obtaining action/approval decisions.notifier.default
default_action
string
notify, skip, create_support_role
YesThe default action to use when there are no approvers.notify
enabled_actions
list(string)
skip, create_support_role
YesThe list of enabled actions approvers can select.
[
"skip",
"create_support_role"
]

Outputs

This pipeline has no outputs.

Tags

category = Compliance
folder = Internal
mod = aws
service = AWS/IAM