Terraform resource: aws iam access key

• aws_iam_access_key

Examples

 resource "aws_iam_user" "test" {
  name = "test"
  path = "/test/"
}

resource "aws_iam_access_key" "test" {
  user = aws_iam_user.test.name
}

output "aws_iam_smtp_password_v4" {
  value = aws_iam_access_key.test.ses_smtp_password_v4
}

resource "aws_iam_access_key" "your_lb" {
  user    = aws_iam_user.lb.name
  pgp_key = "keybase:some_person_that_exists"
}

resource "aws_iam_access_key" "your_lb" {
  user    = aws_iam_user.lb.name
  secret = XXX
}

secret
Secret access key. This attribute is not available for imported resources. Note that this will be written to the state file. If you use this, please protect your backend state file judiciously. Alternatively, you may supply a pgp_key instead, which will prevent the secret from being stored in plaintext, at the cost of preventing the use of the secret key in automation.

terraform state pull | jq '.resources[] | select(.type == "aws_iam_access_key") | .instances[0].attributes' 

Related

• terraform console
• Dynamic Credentials with the AWS Provider

See also

• Terraform IAM resources: aws_iam_user, aws_iam_group, aws_iam_role, aws_iam_role_policy_attachment, aws_iam_policy, aws_iam_role_policy, aws_iam_user_policy, aws_iam_user_policy_attachment, aws_iam_access_key, aws_iam_group_policy, aws_iam_group_policy_attachment, aws_iam_openid_connect_provider

https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iam_access_key

https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iam_access_key#secret

https://stackoverflow.com/questions/59473690/how-to-extract-sensitive-output-variables-in-terraform