I have a Terraform GitLab runner I've provisioned in my kubernetes cluster via Helm to execute Terraform related CICD pipelines. The runner users a specific service account that has access to a provisioned IAM Role for the runner using IAM…
I would like to store a terraform state file in one aws account and deploy infrastructure into another. Is it possible to provide different set of credentials for backend and aws provider using environmental variables(AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY)? Or maybe provide credentials…
I'm trying to get my terraform for perform a for_each argument, but getting the below error; The given "for_each" argument value is unsuitable: the "for_each" argument must be a map, or set of strings, and you have provided a value…
I am trying to setup AWS Managed grafana using terraform. I am following this examples: https://github.com/terraform-aws-modules/terraform-aws-managed-service-grafana/tree/master/examples/complete I can able to setup the grafana via terraform. Then I created dashboard.json and tried to apply dashboard via terraform. But I am not…
I am trying to implement a github actions workflow with a job which will plan and apply my terraform code changes only for directory where changes were made. The problem I am currently facing is that I can't figure out…
I'll try to explain the issue that I'm facing with an example. I had following terraform code for creating multiple EBS volumes in loop. main.tf resource "aws_ebs_volume" "ebs_volume" { count = var.count_drive type = element(var.ebs_drive_type, count.index) size = element(var.ebs_devices_size, count.index)…
Error: error configuring Terraform AWS Provider: error validating provider credentials: error calling sts:GetCallerIdentity: operation error STS: GetCallerIdentity, https response error StatusCode: 403, RequestID: 95e52463-8cd7-038-b924-3a5d4ad6ef03, api error InvalidClientTokenId: The security token included in the request is invalid. with provider["registry.terraform.io/hashicorp/aws"], on provider.tf…
I am using a module to create an autoscaling group that spins up instances and provides them a launch script to run. The launch script is relatively simple, just a few apt gets/installs, create a user, and write some files.…
Is it possible to create an AWS role (with "iam:CreateRole" permissions) to prevent it having privilege escalation, and only allow it to create new roles with a specific set of permissions e.g: "s3:GetObject"? I am not sure if PermissionsBoundary is…
I am currently looking to deploy the SentinelOne agent via Terraform. There does not appear to be much documentation online for VM extension usage in terms of Terraform. Has anyone successfully deployed the S1 agent via Terraform extension? I am…