ministryofjustice / modernisation-platform-terraform-trusted-advisor

Module for refreshing Trusted Advisor every 60 minutes • This repository is defined and managed in Terraform

Modernisation Platform Terraform Trusted Advisor

Terraform module to refresh AWS Trusted Advisor.

This uses the AWS Support API, which is only available in us-east-1.

Usage

module "trusted-advisor" {
  source = "github.com/ministryofjustice/modernisation-platform-terraform-trusted-advisor"
}

Inputs

Name	Description	Type	Default	Required
tags	Tags to apply to resources	map	{}	no

Outputs

None.

Looking for issues?

If you're looking to raise an issue with this module, please create a new issue in the Modernisation Platform repository.

Requirements

Name	Version
terraform	>= 1.0.1
archive	>= 2.0.0
aws	~> 5.0

Providers

Name	Version
archive	>= 2.0.0
aws	~> 5.0

Modules

No modules.

Resources

Name	Type
aws_cloudwatch_event_rule.default	resource
aws_cloudwatch_event_target.default	resource
aws_cloudwatch_log_group.default	resource
aws_iam_policy.default	resource
aws_iam_role.default	resource
aws_iam_role_policy_attachment.default	resource
aws_lambda_function.default	resource
aws_lambda_permission.default	resource
archive_file.function	data source
aws_iam_policy_document.assume-role	data source
aws_iam_policy_document.default	data source

Inputs

Name	Description	Type	Default	Required
iam_role_name	Name of IAM role to use for Lambda Function	string	"AWSTrustedAdvisorRefresh"	no
name	This is used for the Lambda name and CloudWatch Log group, which is automatically created by AWS, but we can manage it via Terraform if we use the same name	string	"trusted-advisor-refresh"	no
tags	Tags to apply to resources, where applicable	map(any)	{}	no

Outputs

No outputs.

modernisation-platform-terraform-trusted-advisor's Issues

User access removed, access is now via a team

Hi there

The user benmillar-cgi either had direct member access to the repository or had direct member access and access via a team.

Access is now only via a team.

If the user was already in a team, then their direct access to the repository has been removed.

If the user was not in a team, then the user will have been added to an automated generated team named repository-name-<read|write|maintain|admin>-team and their direct access to the repository has been removed.

The list of Org teams can be found at https://github.com/orgs/ministryofjustice/teams or https://github.com/orgs/moj-analytical-services/teams.

The user will have the same level of access to the repository via the team.

The first user added to a team is made a team maintainer, this enables that user to manage the users within the team.

Users with admin access are added to the admin team as a team maintainer.

If you have any questions, please contact us in #ask-operations-engineering on Slack.

This issue can be closed.