You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
- Three accounts to segregate accounts by function.
16
+
- management account: organization management account, the account that hosts the AWS Organization
17
+
- meshcloud account: meshStack will use this account to host the IAM users used by meshStack
18
+
- automation account: meshStack will use this account to manage CloudFormation that are used in [Landing Zones](https://docs.meshcloud.io/docs/meshcloud.landing-zones.html).
19
+
- AdministratorAccess in those accounts.
15
20
16
-
This module assumes you are following landing zone best practices and segregate accounts by function.
17
-
To call this module, you will need three `aws` providers set up against different accounts
18
-
19
-
- management account: organization management account, the account that hosts the AWS Organization
20
-
- meshcloud account: meshStack will use this account to host the IAM users used by meshStack
21
-
- automation account: meshStack will use this account to manage CloudFormation that are used in [Landing Zones](https://docs.meshcloud.io/docs/meshcloud.landing-zones.html).
21
+
## Overview of the integration
22
22
23
23
Here is how the users and roles for the meshplatform fit together:
24
24
@@ -40,12 +40,10 @@ graph LR;
40
40
replicatorUser--Trusted Entity with External-id-->meshfedAutomationRole
41
41
```
42
42
43
-
If you're planning to execute the setup manually, one simple way to set up the required providers is by setting up three
44
-
different profiles on your AWS CLI and include those IAM users' access and secret keys in your `~/.aws/credentials` file
45
-
as described below.
43
+
## How to authenticate against the three accounts
46
44
47
-
You can also of course set up the `aws` providers any other way you like (e.g. using `assume_role`), as long as you
48
-
pass them when calling the meshPlatform module:
45
+
One way to set up authentication is using three different profiles on your AWS CLI and include those IAM users' access and secret keys in your `~/.aws/credentials` file
46
+
as described below.
49
47
50
48
```hcl
51
49
provider aws {
@@ -76,6 +74,8 @@ module "meshplatform" {
76
74
}
77
75
```
78
76
77
+
See the `aws`[provider documentation](https://registry.terraform.io/providers/hashicorp/aws/latest/docs#authentication-and-configuration) for other support authentication methods.
78
+
79
79
## Module Structure
80
80
81
81
For an overview of the module structure, refer to [generated terraform docs](./TERRAFORM_DOCS.md)
0 commit comments