AWS help

Requirements

You can either use static credentials (including temporary credentials with a session token) or a profile with a credentials file.

You can pass AWS credentials to Terraform by using either AWS environment variables or TF_VAR_name environment variables.

Follow these links for more information on how to create and retrieve AWS credentials to configure Terraform access to AWS:

• Creating an IAM user in your AWS account
• Using Profiles

Using AWS Static Credentials

You can pass values to Terraform variables with these AWS environment variables:

AWS_ACCESS_KEY_ID=<your_aws_access_key_id>
AWS_SECRET_ACCESS_KEY=<your_aws_secret_access_key>
AWS_SESSION_TOKEN=<your_aws_session_token>

or with these TF_VAR_name environment variables:

TF_VAR_aws_access_key_id=<your_aws_access_key_id>
TF_VAR_aws_secret_access_key=<your_aws_secret_access_key>
TF_VAR_aws_session_token=<your_aws_session_token>

NOTE AWS_SESSION_TOKEN is optional and is only required when you are using temporary AWS credentials. For example, you might generate temporary AWS credentials when assuming an IAM role. See the AWS documentation on environment variables for more information.

See AWS IAM roles for more information about temporary credentials when using an assumed role. In order for an IAM user to be able to assume a role, a trust relationship for that user must be created within the role. For more information, see granting AssumeRole permission for a role for more information.