## Description
This architecture allows you to automate the creation of IAM users in AWS while depicting clearly the relationship between components.
It has by default 2fa and password reset of first signin enabled with the right group and policy attachments. Console login is also enabled.
The resources in this architecture are global, they don't belong to any specific region.
**N.B:**
- The Terraform code is automatically generated with best practices and contains variables that you can customize to fir your needs.
- You have full control to change, add, delete resources or their configuration. The newly generated code will reflect these changes.
- You can replace some resources with Terraform modules.
> terraform apply status: successful
## Architecture components
Here are all the components of this architecture:
- IAM user
- IAM group
- Policy with policy attachment
- 2FA
- Password reset
## Requirements
| Name | Configuration |
| --- | --- |
| Terraform | all versions |
| Provider | AWS |
| Provider version | >= 5.52.0 |
| Access | Admin access |
## How to use the architecture
Clone the architecture and modify the following variables according to your needs:
| Variable | Description |
| --- | --- |
| users | List of users that will be created |
| tags | Tags that are added to all resources |
Once the users are created you can find the passwords in the tfstate if you want to share it with the users.
**N.B:**
- Feel free to remove the resources that are not relevant to your use-case.
- Some variables have default values, please change it if it doesn't fit your deployment.
## Maintainer(s)
You can reach out to these maintainers if you need help or assistance:
- [Brainboard team](mailto:support@brainboard.co)
Brainboard is an AI driven platform to visually design and manage cloud infrastructure, collaboratively. It's the only solution that automatically generates IaC code for any cloud provider, with an embedded CI/CD.