Provides an IAM instance profile.
NOTE: Either
role
orroles
(deprecated) must be specified.
resource "aws_iam_instance_profile" "test_profile" { name = "test_profile" role = "${aws_iam_role.role.name}" } resource "aws_iam_role" "role" { name = "test_role" path = "/" assume_role_policy = <<EOF { "Version": "2012-10-17", "Statement": [ { "Action": "sts:AssumeRole", "Principal": { "Service": "ec2.amazonaws.com" }, "Effect": "Allow", "Sid": "" } ] } EOF }
The following arguments are supported:
name
- (Optional, Forces new resource) The profile's name. If omitted, Terraform will assign a random, unique name. name_prefix
- (Optional, Forces new resource) Creates a unique name beginning with the specified prefix. Conflicts with name
. path
- (Optional, default "/") Path in which to create the profile. roles
- (Deprecated) A list of role names to include in the profile. The current default is 1. If you see an error message similar to Cannot exceed quota for InstanceSessionsPerInstanceProfile: 1
, then you must contact AWS support and ask for a limit increase. WARNING: This is deprecated since version 0.9.3 (April 12, 2017), as >= 2 roles are not possible. See issue #11575. role
- (Optional) The role name to include in the profile. id
- The instance profile's ID. arn
- The ARN assigned by AWS to the instance profile. create_date
- The creation timestamp of the instance profile. name
- The instance profile's name. path
- The path of the instance profile in IAM. role
- The role assigned to the instance profile. roles
- The list of roles assigned to the instance profile. (Deprecated) unique_id
- The unique ID assigned by AWS. Instance Profiles can be imported using the name
, e.g.
$ terraform import aws_iam_instance_profile.test_profile app-instance-profile-1
© 2018 HashiCorpLicensed under the MPL 2.0 License.
https://www.terraform.io/docs/providers/aws/r/iam_instance_profile.html