Add support for IAM instance profiles

README.md

@@ -147,7 +147,9 @@ to the EC2 instance.
 
 * `eip` – (Optional) An [eip](#eip) block used to create or look up an Elastic IP to attach to the EC2 instance. To omit the Elastic IP entirely, do not specify an `eip` block.
 
-* `instance_type` - (Optional) EC2 instance type. Default: t2.nano.
+* `iam_instance_profile` - (Optional) IAM instance profile for this EC2 instance.
+
+* `instance_type` - (Required) EC2 instance type.
 
 * `key_name` - (Optional) SSH key (if any) to assign to EC2 instance.
 

main.tf

@@ -1,7 +1,20 @@
+resource "aws_iam_instance_profile" "default" {
+  for_each = toset(var.iam_instance_profile != null ? [var.iam_instance_profile] : [])
+
+  name = each.key
+  role = each.key
+  tags = local.tags
+}
+
+locals {
+  iam_instance_profile_name = try(aws_iam_instance_profile.default[var.iam_instance_profile].name, null)
+}
+
 resource "aws_instance" "default" {
   ami                         = data.aws_ami.selected.id
   associate_public_ip_address = var.associate_public_ip_address
   availability_zone           = local.availability_zone
+  iam_instance_profile        = local.iam_instance_profile_name
   instance_type               = var.instance_type
   key_name                    = var.key_name
   private_ip                  = var.private_ip
@@ -27,6 +40,12 @@ resource "aws_instance" "default" {
       volume_type           = root_block_device.value.volume_type
     }
   }
+
+  # Suppress destruction and re-creation of resource when new AMIs
+  # are released.
+  lifecycle {
+    ignore_changes = [ami]
+  }
 }
 
 # Add tags to elastic network interface.

outputs.tf

@@ -6,6 +6,10 @@ output "availability_zone" {
   value = local.availability_zone
 }
 
+output "iam_instance_profile" {
+  value = aws_instance.default.iam_instance_profile
+}
+
 output "private_dns" {
   value = aws_instance.default.private_dns
 }

variables.tf

@@ -70,9 +70,13 @@ variable "eip" {
   default     = {}
 }
 
+variable "iam_instance_profile" {
+  description = "IAM instance profile for this EC2 instance"
+  default     = null
+}
+
 variable "instance_type" {
   description = "EC2 instance type"
-  default     = "t2.nano"
 }
 
 variable "key_name" {