Create IAM resources using Terraform

You can use HashiCorp Terraform to create identity and access management (IAM) resources to support AWS cloud account access to Redis Cloud subscriptions.

The following example uses the terraform-aws-Redislabs-Cloud-Account-IAM-Resources module, located in Amazon S3:

1. Create a main.tf as shown below (update the profile, region, and pgp_key values as appropriate).

   Note that a pgp_key is required. For details, see the Terraform docs.

   View terraformIAMTemplate.json

   provider "aws" {
       profile = "tobyhf-admin"
       region = "us-east-1"
   }
   
   module "Redislabs-Cloud-Account-Resources" {
       source = "https://iam-resource-automation-do-not-delete.s3.amazonaws.com/terraform-aws-Redislabs-Cloud-Account-IAM-Resources.zip"
       pgp_key = "keybase:toby_h_ferguson"
   }
   
   output "accessKeyId" {
       value = module.Redislabs-Cloud-Account-Resources.accessKeyId
   }
   
   output "accessSecretKey" {
       value = module.Redislabs-Cloud-Account-Resources.accessSecretKey
       sensitive = true
   }
   
   output "IAMRoleName" {
       value =  module.Redislabs-Cloud-Account-Resources.IAMRoleName
   }
   
   output "consoleUsername" {
       value = module.Redislabs-Cloud-Account-Resources.consoleUsername
   }
   
   output "signInLoginUrl" {
       description =  "Redis User's console login URL"
       value = module.Redislabs-Cloud-Account-Resources.signInLoginUrl
   }
   
   output "consolePassword" {
       value = module.Redislabs-Cloud-Account-Resources.consolePassword
       sensitive = true
   }
   

2. Initialize Terraform with the module:

   Note: Terraform requires AWS credentials be supplied, but the source of the module is a public S3 bucket, so any valid credentials should work. Replace the XXXX fields below with your relevant values

   AWS_ACCESS_KEY_ID=XXXX AWS_SECRET_KEY=XXXX terraform init
   

3. Build the resources:

   terraform apply
   

   This displays the required values. To access the sensitive data:

   • accessSecretKey: echo $(terraform output -raw accessSecretKey)

   • consolePassword:

     echo $(terraform output -raw consolePassword | base64 --decode | keybase pgp decrypt)