Pgp key in terraform for aws_iam_user_login_profile

Question

I am new to terraform creating iam user using terraform

below is the .tf file

resource "aws_iam_user" "lb" {
  name = "Ec2_view"

  # path = "/system/"
  # tags = {
  #   tag-key = "tag-value"
  # }
}

resource "aws_iam_access_key" "lb" {
  user = "${aws_iam_user.lb.name}"
}

resource "aws_iam_user_policy" "lb_ro" {
  name = "test"
  user = "${aws_iam_user.lb.name}"

  policy = <<EOF
{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Action": [
        "ec2:Describe*"
      ],
      "Effect": "Allow",
      "Resource": "*"
    }
  ]
}
EOF
}

resource "aws_iam_user_login_profile" "u" {
  user                    = "${aws_iam_user.lb.name}"
  password_reset_required = true
  pgp_key="keybase:terraform_user"
}

output "password" {
value="${aws_iam_user_login_profile.u.encrypted_password"
}

what does pgp_key mean in aws_iam_user_login_profile and steps to create pgp_key and using it in terraform code?

Answer 1

Got the answer

1. Need to install Keybase in our local
2. need to create Keybase key by using keybase pgp gen
3. then give the reference of this Keybase key in your terraform code keybase:username_of_keybase
4. Then terraform apply
5. Then we need to get the decrypted password

terraform output -raw password | base64 --decode | keybase pgp decrypt