feat: Add policy outputs; render wrapper

Author: bryantbiggs

.pre-commit-config.yaml

@@ -3,7 +3,7 @@ repos:
     rev: v1.88.2
     hooks:
       - id: terraform_fmt
-      - id: terraform_validate
+      - id: terraform_wrapper_module_for_each
       - id: terraform_docs
         args:
           - '--args=--lockfile=false'
@@ -22,8 +22,11 @@ repos:
           - '--args=--only=terraform_required_providers'
           - '--args=--only=terraform_standard_module_structure'
           - '--args=--only=terraform_workspace_remote'
+          - '--args=--only=terraform_unused_required_providers'
+      - id: terraform_validate
   - repo: https://github.com/pre-commit/pre-commit-hooks
     rev: v4.5.0
     hooks:
       - id: check-merge-conflict
       - id: end-of-file-fixer
+      - id: trailing-whitespace

README.md

@@ -1,9 +1,6 @@
 # AWS EKS Pod Identity Terraform module
 
-Terraform module which creates AWS EKS Pod Identity roles.
-
-## :warning: Still under development and not recommended for production use :warning:
-
+Terraform module which creates [Amazon EKS Pod Identity roles](https://docs.aws.amazon.com/eks/latest/userguide/pod-identities.html).
 
 ## Usage
 
@@ -559,6 +556,9 @@ No modules.
 
 | Name | Description |
 |------|-------------|
+| <a name="output_iam_policy_arn"></a> [iam\_policy\_arn](#output\_iam\_policy\_arn) | The ARN assigned by AWS to this policy |
+| <a name="output_iam_policy_id"></a> [iam\_policy\_id](#output\_iam\_policy\_id) | The policy's ID |
+| <a name="output_iam_policy_name"></a> [iam\_policy\_name](#output\_iam\_policy\_name) | Name of IAM policy |
 | <a name="output_iam_role_arn"></a> [iam\_role\_arn](#output\_iam\_role\_arn) | ARN of IAM role |
 | <a name="output_iam_role_name"></a> [iam\_role\_name](#output\_iam\_role\_name) | Name of IAM role |
 | <a name="output_iam_role_path"></a> [iam\_role\_path](#output\_iam\_role\_path) | Path of IAM role |

examples/complete/README.md

@@ -3,7 +3,7 @@ provider "aws" {
 }
 
 locals {
-  region = "us-east-1"
+  region = "eu-west-1"
   name   = "eks-pod-identity-ex-${basename(path.cwd)}"
 
   tags = {