diff --git a/README.md b/README.md index 7acc589..2f48086 100644 --- a/README.md +++ b/README.md @@ -38,6 +38,7 @@ Truefoundry AWS platform features | [aws_iam_role_policy_attachment.truefoundry_platform_s3_policy_attachment](https://registry.terraform.io/providers/hashicorp/aws/5.14.0/docs/resources/iam_role_policy_attachment) | resource | | [aws_iam_role_policy_attachment.truefoundry_platform_secrets_manager_policy_attachment](https://registry.terraform.io/providers/hashicorp/aws/5.14.0/docs/resources/iam_role_policy_attachment) | resource | | [aws_iam_user.truefoundry_platform_user](https://registry.terraform.io/providers/hashicorp/aws/5.14.0/docs/resources/iam_user) | resource | +| [aws_iam_user_policy_attachment.truefoundry_platform_user_cluster_integration_policy_attachment](https://registry.terraform.io/providers/hashicorp/aws/5.14.0/docs/resources/iam_user_policy_attachment) | resource | | [aws_iam_user_policy_attachment.truefoundry_platform_user_ecr_policy_attachment](https://registry.terraform.io/providers/hashicorp/aws/5.14.0/docs/resources/iam_user_policy_attachment) | resource | | [aws_iam_user_policy_attachment.truefoundry_platform_user_parameter_store_policy_attachment](https://registry.terraform.io/providers/hashicorp/aws/5.14.0/docs/resources/iam_user_policy_attachment) | resource | | [aws_iam_user_policy_attachment.truefoundry_platform_user_s3_policy_attachment](https://registry.terraform.io/providers/hashicorp/aws/5.14.0/docs/resources/iam_user_policy_attachment) | resource | diff --git a/iam.tf b/iam.tf index d4b8ada..7cda435 100644 --- a/iam.tf +++ b/iam.tf @@ -249,7 +249,6 @@ resource "aws_iam_user" "truefoundry_platform_user" { tags = local.tags } - resource "aws_iam_access_key" "truefoundry_platform_user_keys" { count = var.platform_feature_enabled && var.platform_user_enabled ? 1 : 0 @@ -279,3 +278,9 @@ resource "aws_iam_user_policy_attachment" "truefoundry_platform_user_ecr_policy_ user = aws_iam_user.truefoundry_platform_user[0].name policy_arn = aws_iam_policy.truefoundry_platform_feature_ecr_policy[0].arn } + +resource "aws_iam_user_policy_attachment" "truefoundry_platform_user_cluster_integration_policy_attachment" { + count = var.platform_feature_enabled ? (var.feature_cluster_integration_enabled && var.platform_user_enabled) ? 1 : 0 : 0 + user = aws_iam_user.truefoundry_platform_user[0].name + policy_arn = aws_iam_policy.truefoundry_platform_feature_cluster_integration_policy[0].arn +} \ No newline at end of file