Terraform V4 AWS Provider, Github Actions, and Named Profiles

Zach Mowrey — Wed, 18 May 2022 12:42:24 +0000

Environment: Github Actions
Authentication: configure-aws-credentials action, using OIDC.
Terraform AWS Provider: >= 4

The Context

We want to use a named AWS profile for convenience in our local environments, but the named profile doesn't exist in our CI/CD pipelines, and we can't create it there (the necessary location isn't writable).

The Issue

The V3 AWS Provider for Terraform would gracefully fall back in an attempt to find valid AWS credentials when it couldn't find credentials for a named profile.

The V4 AWS Provider does not. Instead of following the AWS-CLI workflow for locating credentials, the V4 provider halts and returns an error:

error configuring Terraform AWS Provider: failed to get shared config profile, XYZ

The Resolution

We set the profile dynamically in our Terraform code:

Create a new variable. Make it a bool, with a default of false. I called mine "pipeline".

Modify your provider's profile. If we're in a pipeline, set the profile to "". Otherwise, you can set it to whatever value you had before.

PlannedBudgetLimits Cloudformation Example

Zach Mowrey — Fri, 08 Apr 2022 12:46:41 +0000

While working with an enterprise finance department to establish planned budget alarms in their multi-account environment, I reached for Cloudformation to help me avoid manually entering 1200 monthly budgets.

The AWS documentation for planned budgets is fine, but the lack of an example and some explicit call-outs caused me to spin wheels while trying to find examples that would explain the error messages I kept getting.

It's my hope the following sample will prove helpful to anyone else trying to do the same:

Resources:

  # If you're managing multiple accounts, you'll probably want this resource name
  # to reflect the name of the target account.

  BudgetAccountNameHere:
    Type: "AWS::Budgets::Budget"
    Properties:
      Budget:
        TimeUnit: MONTHLY
        BudgetType: COST
        PlannedBudgetLimits:
          # Unix Timestamp of Start of Month, UTC.
          # You must provide a full 12-month list, starting with the current month.
          "1648771200":
            Amount: 100.00
            Unit: USD
          "1651363200":
            Amount: 100.00
            Unit: USD
          "1654041600":
            Amount: 100.00
            Unit: USD
          "1656633600":
            Amount: 100.00
            Unit: USD
          "1659312000":
            Amount: 100.00
            Unit: USD
          "1661990400":
            Amount: 100.00
            Unit: USD
          "1664582400":
            Amount: 100.00
            Unit: USD
          "1667260800":
            Amount: 100.00
            Unit: USD
          "1669852800":
            Amount: 100.00
            Unit: USD
          "1672531200":
            Amount: 100.00
            Unit: USD
          "1675209600":
            Amount: 100.00
            Unit: USD
          "1677628800":
            Amount: 100.00
            Unit: USD
        CostFilters:
          LinkedAccount:
            - YOUR_ACCOUNT_ID_HERE
      NotificationsWithSubscribers:
        - Notification:
            NotificationType: ACTUAL
            ComparisonOperator: GREATER_THAN
            Threshold: 99
          Subscribers:
            - SubscriptionType: EMAIL
              Address: YOUR_EMAIL_HERE

DEV Community: Zach Mowrey

Terraform V4 AWS Provider, Github Actions, and Named Profiles

PlannedBudgetLimits Cloudformation Example