I’ve written a blog post on how to implement RBAC with Terraform:
Authentication and authorization are two important concepts for a secure cloud environment.
Authentication involves verifying that you are who you say you are by using something you know (e.g., username/password), something you possess (e.g., a YubiKey or a certificate private key) or something you are (e.g., fingerprint or face ID). Authorization is about determining if you have the required permissions to perform some action in a given system.
Terraform is no different. You must authenticate to the providers you are using, and you must have the proper authorization to use state backends and to provision infrastructure on the target platform.
With Terraform, you can also configure everything around authentication and authorization on target platforms (e.g., cloud providers, database systems, and more).
In this blog post, we will focus on one important concept within authorization: implementing role-based access control with Terraform.
Read more at spacelift.io
