No summary - See description for more info.

# `elastio-connector-account` module

Deploys an AWS CloudFormation stack named `elastio-account-level-stack`, which is deployed once per AWS account and contains the required IAM resources (roles, policies, etc.) for Elastio Connector to operate in the same account.

See the [`elastio-connector` module implementation](../../main.tf) for an example of how this module should be used.

## Installation

[Configure](../../README.md#configuring-the-terraform-modules-registry) the Elastio terraform module registry, and add this to your project:

```tf
module "elastio_connector_account" {
source = "terraform.cloudsmith.io/public/elastio-conenctor-account/aws"
version = "0.34.0"

// Provide input parameters
}
```

<!-- BEGIN_TF_DOCS -->

## Requirements

| Name | Version |
| ------------------------------------------------------------------------ | ------- |
| <a name="requirement_terraform"></a> [terraform](#requirement_terraform) | ~> 1.9 |
| <a name="requirement_aws"></a> [aws](#requirement_aws) | >= 5.0 |
| <a name="requirement_http"></a> [http](#requirement_http) | >= 3.0 |

## Providers

| Name | Version |
| ------------------------------------------------------------------ | ------- |
| <a name="provider_aws"></a> [aws](#provider_aws) | >= 5.0 |
| <a name="provider_http"></a> [http](#provider_http) | >= 3.0 |
| <a name="provider_terraform"></a> [terraform](#provider_terraform) | n/a |

## Modules

No modules.

## Resources

| Name | Type |
| --------------------------------------------------------------------------------------------------------------------------------- | ----------- |
| [aws_cloudformation_stack.this](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/cloudformation_stack) | resource |
| [terraform_data.service_linked_roles](https://registry.terraform.io/providers/hashicorp/terraform/latest/docs/resources/data) | resource |
| [http_http.cloudformation_template](https://registry.terraform.io/providers/hashicorp/http/latest/docs/data-sources/http) | data source |

## Inputs

| Name | Description | Type | Default | Required |
| ------------------------------------------------------------------------------------------------------------------------------------------------ | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | ---------- | :------: |
| <a name="input_disable_customer_managed_iam_policies"></a> [disable_customer_managed_iam_policies](#input_disable_customer_managed_iam_policies) | If this is set to `false` (or omitted), then the stack will create<br/> additional customer-managed IAM policies that you can attach to your<br/> IAM identities to grant them direct access to the Elastio Connector stack.<br/> This way you can use elastio CLI directly to list Elastio scan jobs or<br/> submit new scan jobs. Set this to `true` if you don't need these policies. | `bool` | `null` | no |
| <a name="input_ecr_public_prefix"></a> [ecr_public_prefix](#input_ecr_public_prefix) | Repository prefix for the ECR Public registry. Used to configure a pull-through<br/> cache for elastio images that are downloaded from ECR Public. You can configure<br/> your own cache via ECR private, and then specify the repository prefix here.<br/><br/> This field supports 'account_id' and 'region' interpolation.<br/> For example, such value can be provided:<br/> '{{account\_id}}.dkr.ecr.{{region}}.amazonaws.com/ecr-public' | `string` | `null` | no |
| <a name="input_elastio_pat"></a> [elastio_pat](#input_elastio_pat) | Personal Access Token generated by the Elastio Portal | `string` | n/a | yes |
| <a name="input_elastio_tenant"></a> [elastio_tenant](#input_elastio_tenant) | Name of your Elastio tenant. For example `mycompany.app.elastio.com` | `string`