Terraform + AWS (AssumeRole)

How terraform authenticate to Cloud Providers

Challengs with managing cloud provider credentials

1. Statically configured and stored locally on servers
2. Hardcoded into system config (CI/CD, environment variable, CLI tools, scripts etc)
3. Sprawl of credentials (shared).
4. Some of the credentials are over priviledges.
5. Long lived credentials, not rotated.

Desire Architecture (Lab-2)

<aside> 💡 Reduce to managing long lived credential (not rotated) as much as possible

</aside>

AWS AssumeRole & Terraform

• What is AWS AssumeRole & STS token?

Creation of AWS IAM Role via Management Console

<aside> 💡 AWS IAM Role, AssumeRole & STS

</aside>

Create Assume Role in AWS-DEV Account

First Go To ⇒ IAM ⇒ Click Create role