Requirements

Name	Version
terraform	> 1.3
aws	~> 6.0

Providers

Name	Version
aws	~> 6.0
sops	n/a

Modules

No modules.

Resources

Name	Type
aws_iam_access_key.admin_key	resource
aws_iam_access_key.bedrock_opencode	resource
aws_iam_access_key.sops_secrets_operator	resource
aws_iam_openid_connect_provider.github_actions	resource
aws_iam_role.bedrock_batch	resource
aws_iam_role.github_actions_sops_kms	resource
aws_iam_role_policy.bedrock_batch_invoke	resource
aws_iam_role_policy.bedrock_batch_s3	resource
aws_iam_role_policy.github_actions_sops_kms	resource
aws_iam_user.admin	resource
aws_iam_user.bedrock_opencode	resource
aws_iam_user.sops_secrets_operator	resource
aws_iam_user_policy.bedrock_opencode	resource
aws_iam_user_policy.sops_secrets_operator_kms	resource
aws_iam_user_policy_attachment.admin_attach	resource
aws_kms_alias.sops	resource
aws_kms_key.sops	resource
aws_s3_bucket.bedrock_batch	resource
aws_s3_bucket.private	resource
aws_s3_bucket.public	resource
aws_s3_bucket.web	resource
aws_s3_bucket_policy.public	resource
aws_s3_bucket_policy.web	resource
aws_s3_bucket_public_access_block.bedrock_batch	resource
aws_s3_bucket_public_access_block.public	resource
aws_s3_bucket_public_access_block.web	resource
aws_s3_bucket_website_configuration.web	resource
aws_caller_identity.current	data source
sops_file.secret_vars	data source

Inputs

No inputs.

Outputs

Name	Description
admin_access_keys	Admin IAM user access keys
bedrock_batch_bucket_name	S3 bucket for Bedrock batch inference input and output data
bedrock_batch_service_role_arn	Service role ARN to pass as roleArn when creating Bedrock batch inference jobs
bedrock_opencode_access_key	Access key for OpenCode to invoke Anthropic models via AWS Bedrock
bedrock_opencode_iam_user_arn	IAM user ARN for OpenCode Bedrock access
github_actions_sops_kms_role_arn	IAM role ARN for GitHub Actions SOPS KMS access
sops_kms_key_arn	KMS key ARN for future SOPS AWS KMS recipients
sops_secrets_operator_access_key	Access key for the k3s sops-secrets-operator to decrypt SOPS AWS KMS secrets
sops_secrets_operator_iam_user_arn	IAM user ARN for the k3s sops-secrets-operator
web_bucket_endpoints	Website endpoints for public web S3 buckets