scaleway/terraform-deployer-iam v0.1.0

A new module, scaleway/terraform-deployer-iam, builds a spoke's Terraform deployer identity in one call: an IAM application, its policy, and an API key for it (LIB-0014). It replaces calling iam-application, iam-policy and iam-api-key side by side and takes the same inputs: name, description, the organization and project permission sets, default_project_id and expires_at, with api_key_description for the key.

Two details matter when adopting existing objects:

• policy_name is used exactly as given. iam-policy appends -policy, so a policy it created is named <name>-policy. Pass that full name here and the adoption is a zero diff. It defaults to "<name>-policy".
• The resources are inlined, at fixed addresses (scaleway_iam_application.application, scaleway_iam_policy.policy[0], time_static.created, scaleway_iam_api_key.api_key). A leaf moving off the three separate modules writes one moved block for each.

The leaf that calls this manages the key every other leaf deploys with. Allowlist it for the spoke's Scaleway breakglass credential, so it never authenticates with the key it rotates.

Outputs: application_id, policy_id, and the sensitive access_key and secret_key.

🤖 Generated with Claude Code

#66