Skip to content

hosting-account

Directory actions

More options

Directory actions

More options

Latest commit

 

History

History

hosting-account

Folders and files

NameName
Last commit message
Last commit date

parent directory

..
README.md
README.md
 
 
main.tf
main.tf
 
 
outputs.tf
outputs.tf
 
 
terraform.tf
terraform.tf
 
 
terraform.tfvars.example
terraform.tfvars.example
 
 
variables.tf
variables.tf
 
 

README.md

Providers

No providers.

Inputs

Name Description Type Default Required
agent_space_name Display name of the DevOps Agent Space (shown in console). Spaces are allowed. string n/a yes
agent_space_description Description for the DevOps Agent Space. string "AWS DevOps Agent Space" no
agentspace_region Region where the AgentSpace is created. Must be a supported region — eu-west-2 (London) is not supported. See module README for the full list. string "eu-west-1" no
aws_region AWS region for hosting account resources. IAM is global so this is cosmetic, but should match your primary region. string "eu-west-2" no
name_prefix Short slug used in IAM role names — no spaces. Defaults to agent_space_name with spaces replaced by hyphens. string "" no
secondary_accounts Map of workload accounts to associate as secondary sources. Populate after Phase 1 once each spoke role ARN is known. 
map(object({
    account_id             = string
    cross_account_role_arn = string
  }))
 {} no
tags Tags to apply to all resources. map(string) {} no

Outputs

Name Description
agent_space_arn ARN of the AgentSpace. Pass this to each workload account's spoke configuration as agent_space_arn.
agent_space_id ID of the AgentSpace.
agent_space_name Display name of the AgentSpace.
agentspace_role_arn ARN of the AgentSpace IAM role in the hosting account.
operator_role_arn ARN of the Operator App IAM role. Configure IAM Identity Center to allow operator portal access via this role.