» Resource: aws_iam_instance_profile
Provides an IAM instance profile.
NOTE: Either role
or roles
(deprecated) must be specified.
» Example Usage
resource "aws_iam_instance_profile" "test_profile" {
name = "test_profile"
role = "${aws_iam_role.role.name}"
}
resource "aws_iam_role" "role" {
name = "test_role"
path = "/"
assume_role_policy = <<EOF
{
"Version": "2012-10-17",
"Statement": [
{
"Action": "sts:AssumeRole",
"Principal": {
"Service": "ec2.amazonaws.com"
},
"Effect": "Allow",
"Sid": ""
}
]
}
EOF
}
» Argument Reference
The following arguments are supported:
-
name
- (Optional, Forces new resource) The profile's name. If omitted, Terraform will assign a random, unique name. -
name_prefix
- (Optional, Forces new resource) Creates a unique name beginning with the specified prefix. Conflicts withname
. -
path
- (Optional, default "/") Path in which to create the profile. -
roles
- (Deprecated) A list of role names to include in the profile. The current default is 1. If you see an error message similar toCannot exceed quota for InstanceSessionsPerInstanceProfile: 1
, then you must contact AWS support and ask for a limit increase. WARNING: This is deprecated since version 0.9.3 (April 12, 2017), as >= 2 roles are not possible. See issue #11575. -
role
- (Optional) The role name to include in the profile.
» Attribute Reference
-
id
- The instance profile's ID. -
arn
- The ARN assigned by AWS to the instance profile. -
create_date
- The creation timestamp of the instance profile. -
name
- The instance profile's name. -
path
- The path of the instance profile in IAM. -
role
- The role assigned to the instance profile. -
roles
- The list of roles assigned to the instance profile. (Deprecated) -
unique_id
- The unique ID assigned by AWS.
» Import
Instance Profiles can be imported using the name
, e.g.
$ terraform import aws_iam_instance_profile.test_profile app-instance-profile-1