[ale210]

Part of #205 (step 2 of 2: recreate the account removed in #218 as here, the GitHub handle)

What changes did you make?

• Added IAM user here to terraform/aws-users.tf, in read-only-group, with slack_id = "U07PKPHF7QQ"

Why did you make the changes (we will use this info to test)?

• The account is recreated under the GitHub handle, as the naming convention expects. Group and tags are unchanged from the removed here.hfla block
• Expected plan: 3 to add, 0 to change, 0 to destroy: the user, its login profile and its read-only-group membership
• After merge: the user-bot should DM U07PKPHF7QQ from the Slack app with the sign-in page, here and a temporary password. /aws/lambda/user-bot in us-east-1 should show the message handed to the sender and no password

[github-actions]

Terraform plan in terraform
With backend config files: terraform/prod.backend.tfvars
With variables: iam_only = false

Plan: 3 to add, 0 to change, 0 to destroy.

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
+   create

Terraform will perform the following actions:

  # module.iam_user_here.aws_iam_user.user will be created
+   resource "aws_iam_user" "user" {
+       arn           = (known after apply)
+       force_destroy = true
+       id            = (known after apply)
+       name          = "here"
+       path          = "/"
+       tags          = {
+           "Access Level" = "1"
+           "Project"      = "devops-security"
+           "slack_id"     = "***********"
        }
+       tags_all      = {
+           "Access Level" = "1"
+           "Project"      = "devops-security"
+           "managed-by"   = "terraform-devops-security"
+           "slack_id"     = "***********"
        }
+       unique_id     = (known after apply)
    }

  # module.iam_user_here.aws_iam_user_group_membership.user_group_membership will be created
+   resource "aws_iam_user_group_membership" "user_group_membership" {
+       groups = [
+           "read-only-group",
        ]
+       id     = (known after apply)
+       user   = "here"
    }

  # module.iam_user_here.aws_iam_user_login_profile.user_login will be created
+   resource "aws_iam_user_login_profile" "user_login" {
+       encrypted_password      = (known after apply)
+       id                      = (known after apply)
+       key_fingerprint         = (known after apply)
+       password                = (sensitive value)
+       password_length         = 20
+       password_reset_required = true
+       user                    = "here"
    }

Plan: 3 to add, 0 to change, 0 to destroy.

✅ Plan applied in Apply Terraform changes on merge #55