github.com/nathanielks/terraform@v0.6.1-0.20170509030759-13e1a62319dc/website/source/docs/providers/aws/r/iam_user_login_profile.html.markdown (about) 1 --- 2 layout: "aws" 3 page_title: "AWS: aws_iam_user_login_profile" 4 sidebar_current: "docs-aws-resource-iam-user-login-profile" 5 description: |- 6 Provides an IAM user login profile and encrypts the password. 7 --- 8 9 # aws\_iam\_user\_login\_profile 10 11 Provides one-time creation of a IAM user login profile, and uses PGP to 12 encrypt the password for safe transport to the user. PGP keys can be 13 obtained from Keybase. 14 15 ## Example Usage 16 17 ```hcl 18 resource "aws_iam_user" "u" { 19 name = "auser" 20 path = "/" 21 force_destroy = true 22 } 23 24 resource "aws_iam_user_login_profile" "u" { 25 user = "${aws_iam_user.u.name}" 26 pgp_key = "keybase:some_person_that_exists" 27 } 28 29 output "password" { 30 value = "${aws_iam_user_login_profile.u.encrypted_password}" 31 } 32 ``` 33 34 ## Argument Reference 35 36 The following arguments are supported: 37 38 * `user` - (Required) The IAM user's name. 39 * `pgp_key` - (Required) Either a base-64 encoded PGP public key, or a 40 keybase username in the form `keybase:username`. 41 * `password_reset_required` - (Optional, default "true") Whether the 42 user should be forced to reset the generated password on first login. 43 * `password_length` - (Optional, default 20) The length of the generated 44 password. 45 46 ## Attributes Reference 47 48 The following attributes are exported: 49 50 * `key_fingerprint` - The fingerprint of the PGP key used to encrypt 51 the password 52 * `encrypted_password` - The encrypted password, base64 encoded. 53 54 ~> **NOTE:** The encrypted password may be decrypted using the command line, 55 for example: `terraform output password | base64 --decode | keybase pgp decrypt`. 56 57 ## Import 58 59 IAM Login Profiles may not be imported.