如何连接到私有 VPC 中的 AWS IAM API？

Question

I am trying to run Terraform in a private VPC using the AWS provider. Terraform supports overriding various AWS endpoints and so I have been using VPC Endpoints to expose relevant services in my VPC and overriding those endpoints in my provider configuration.

Unfortunately IAM is not supported by VPC Endpoints - I need this API to create some resource for example AWS roles, so how can I use this API in my private VPC from Terraform?

$ terraform -v
Terraform v0.11.13
+ provider.aws v2.17.0

Answer 1

Cloudformation supports VPC endpoints. So you can make a Cloudformation template that creates the IAM resources. Then apply that cloudformation stack via terraform. Then do another Terraform module that refers to those resources as data sources.

Given the constraints of your problem, it is only possible to solve this indirectly.

Docs: Terraform Docs for Cloudformation Docs for AWS Cloudformation VPC Endpoints