Circling back to role-based access control (RBAC) now, we have touched on the importance of user, group, and role management in previous parts of this book, so let's look at how we can implement these elements in Terraform.
If you are familiar with Microsoft Active Directory or have existing group policies you would like to apply, the AWS Directory Service will let you easily migrate your objects to the cloud. In most cases, we won't actually move them, but federate our cloud directory services with an existing directory, giving current users and groups access to the AWS Management Console and APIs:
resource "aws_directory_service_directory" "bar" {
name = "corp.notexample.com"
password = "SuperSecretPassw0rd"
edition = "Standard"
type = "MicrosoftAD"
vpc_settings {
vpc_id = "${aws_vpc.main.id}"
subnet_ids = ["${aws_subnet.foo.id}", "${aws_subnet.bar.id}"]
}
}You should enable secure directory access on your service (LDAPS). As this is important I...