Merge pull request #710 from rust-lang/metrics-initiative

Create AWS account for metrics-initiative

Author: jdno

terragrunt/accounts/metrics-initiative-prod/account.json

@@ -0,0 +1,10 @@
+{
+    "aws": {
+        "profile": "metrics-initiative-prod",
+        "regions": [
+            {
+                "region": "us-east-2"
+            }
+        ]
+    }
+}

terragrunt/accounts/metrics-initiative-prod/datadog-aws/.terraform.lock.hcl

@@ -0,0 +1,12 @@
+terraform {
+  source = "../../../modules//datadog-aws"
+}
+
+include {
+  path           = find_in_parent_folders()
+  merge_strategy = "deep"
+}
+
+inputs = {
+  env = "prod"
+}

terragrunt/accounts/metrics-initiative-prod/datadog-aws/terragrunt.hcl

@@ -0,0 +1,12 @@
+terraform {
+  source = "../../../..//terragrunt/modules/grafana"
+}
+
+include {
+  path           = find_in_parent_folders()
+  merge_strategy = "deep"
+}
+
+inputs = {
+  workspace_name = "metrics-initiative-prod"
+}

terragrunt/accounts/metrics-initiative-prod/grafana/.terraform.lock.hcl

@@ -0,0 +1,8 @@
+terraform {
+  source = "../../../..//terragrunt/modules/wiz"
+}
+
+include {
+  path           = find_in_parent_folders()
+  merge_strategy = "deep"
+}

terragrunt/accounts/metrics-initiative-prod/grafana/terragrunt.hcl

@@ -93,5 +93,11 @@ inputs = {
       email       = "cuviper@gmail.com"
       groups      = ["release"]
     }
+    "yaahc" = {
+      given_name  = "Jane"
+      family_name = "Losare-Lusby"
+      email       = "jlusby42@gmail.com"
+      groups      = ["metrics-initiative"]
+    }
   }
 }

terragrunt/accounts/metrics-initiative-prod/wiz/.terraform.lock.hcl

@@ -51,3 +51,8 @@ resource "aws_organizations_account" "ci_prod" {
   name  = "ci-prod"
   email = "admin+ci-prod@rust-lang.org"
 }
+
+resource "aws_organizations_account" "metrics_initiative_prod" {
+  name  = "metrics-initiative-prod"
+  email = "admin+metrics-initiative-prod@rust-lang.org"
+}

terragrunt/accounts/metrics-initiative-prod/wiz/terragrunt.hcl

@@ -35,6 +35,13 @@ resource "aws_identitystore_group" "crates_io" {
   description  = "The crates.io team"
 }
 
+resource "aws_identitystore_group" "metrics_initiative" {
+  identity_store_id = local.identity_store_id
+
+  display_name = "metrics-initiative"
+  description  = "The metrics-initiative team"
+}
+
 resource "aws_identitystore_group" "triagebot" {
   identity_store_id = local.identity_store_id
 
@@ -348,6 +355,18 @@ locals {
         permissions : [aws_ssoadmin_permission_set.read_only_access] },
       ]
     },
+    # metrics initiative prod
+    {
+      account : aws_organizations_account.metrics_initiative_prod,
+      groups : [
+        { group : aws_identitystore_group.infra-admins,
+        permissions : [aws_ssoadmin_permission_set.read_only_access, aws_ssoadmin_permission_set.administrator_access] },
+        { group : aws_identitystore_group.infra,
+        permissions : [aws_ssoadmin_permission_set.read_only_access] },
+        { group : aws_identitystore_group.metrics_initiative,
+        permissions : [aws_ssoadmin_permission_set.read_only_access] },
+      ]
+    },
   ]
 }