George L. Yermulnik yermulnik

I'll try to share my approach to use private GitHub hosted terraform modules with AFT v1.5.1. It relies on GH App to create ephemeral tokens during Global Customization stage which will share with the target account so it can be used during Account Customization stage.

Relates to: aws-ia/terraform-aws-control_tower_account_factory#42

Pre-requirements:

Create a GH APP:
- Permissions: allow the clone of repositories
- Set to a restricted list of terraform modules repos
Create parameter store entries for GH_APP pem, id and installation_id under AFT_MGT account

Getting Started

Virtualenv setup

pip install virtualenvwrapper
mkvirtualenv tfe2tfvars
workon tfe2tfvars
pip install -r requirements.txt

	#!/usr/bin/env -S bash -c "docker run -p 8080:8080 -it --rm \$(docker build --progress plain -f \$0 . 2>&1 \| tee /dev/stderr \| grep -oP 'sha256:[0-9a-f]*')"

	# syntax = docker/dockerfile:1.4.0

	FROM node:20

	WORKDIR /root

	RUN npm install sqlite3

	#!/bin/env python3

	#
	# TERRADIFF
	#
	# Small script to convert EOT diffs into single line diffs to make them easier to read
	#
	# How to use
	# terraform plan \| terradiff
	#

	# Copyright 2022 Ben Kehoe
	#
	# Licensed under the Apache License, Version 2.0 (the "License"). You
	# may not use this file except in compliance with the License. A copy of
	# the License is located at
	#
	# http://www.apache.org/licenses/LICENSE-2.0
	#
	# or in the "license" file accompanying this file. This file is
	# distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF

	import logging
	import boto3
	from argparse import ArgumentParser, HelpFormatter
	from botocore.exceptions import ClientError, ProfileNotFound

	# logger config
	logger = logging.getLogger()
	logging.basicConfig(level=logging.INFO,
	format='%(message)s')

	# * WARNING *
	# This gist is no longer maintained
	# It has been replaced by aws-assume-role-lib in PyPI
	# Documentation at https://github.com/benkehoe/aws-assume-role-lib
	# It is still a single-file library, you can find the stable version here:
	# https://raw.githubusercontent.com/benkehoe/aws-assume-role-lib/stable/aws_assume_role_lib/aws_assume_role_lib.py
	# (link also available in the docs)

	# Copyright 2020 Ben Kehoe
	#

	cmake_minimum_required(VERSION 3.10)
	project(cppgen VERSION 0.0.1 LANGUAGES CXX)
	set(CMAKE_CXX_STANDARD 11)
	set(CMAKE_CXX_STANDARD_REQUIRED ON)

	add_executable(remapping remapping.cc)
	target_link_libraries(remapping stdc++ "-framework Foundation" "-framework IOKit" objc)

	#!/usr/bin/env python
	"""
	sort terraform variables
	it's easy to do, just follow these steps:
	python sort_terraform_variables.py variables.tf > sorted_variables.tf
	mv sorted_variables.tf variables.tf
	"""

	from __future__ import print_function
	import sys