Manages a directory's multi-factor authentication (MFA) using a Remote Authentication Dial In User Service (RADIUS) server.
resource "aws_directory_service_radius_settings" "example" {
directory_id = aws_directory_service_directory.example.id
authentication_protocol = "PAP"
display_label = "example"
radius_port = 1812
radius_retries = 4
radius_servers = ["10.0.1.5"]
radius_timeout = 1
shared_secret = "12345678"
}
This resource supports the following arguments:
authentication_protocol
- (Optional) The protocol specified for your RADIUS endpoints. Valid values: PAP
, CHAP
, MS-CHAPv1
, MS-CHAPv2
.directory_id
- (Required) The identifier of the directory for which you want to manager RADIUS settings.display_label
- (Required) Display label.radius_port
- (Required) The port that your RADIUS server is using for communications. Your self-managed network must allow inbound traffic over this port from the AWS Directory Service servers.radius_retries
- (Required) The maximum number of times that communication with the RADIUS server is attempted. Minimum value of 0
. Maximum value of 10
.radius_servers
- (Required) An array of strings that contains the fully qualified domain name (FQDN) or IP addresses of the RADIUS server endpoints, or the FQDN or IP addresses of your RADIUS server load balancer.radius_timeout
- (Required) The amount of time, in seconds, to wait for the RADIUS server to respond. Minimum value of 1
. Maximum value of 50
.shared_secret
- (Required) Required for enabling RADIUS on the directory.use_same_username
- (Optional) Not currently used.This resource exports the following attributes in addition to the arguments above:
id
- The directory identifier.aws_directory_service_radius_settings
provides the following Timeouts configuration options:
create
- (Default 30 minutes
) Used for RADIUS settings creationupdate
- (Default 30 minutes
) Used for RADIUS settings updateIn Terraform v1.5.0 and later, use an import
block to import RADIUS settings using the directory ID. For example:
import {
to = aws_directory_service_radius_settings.example
id = "d-926724cf57"
}
Using terraform import
, import RADIUS settings using the directory ID. For example:
% terraform import aws_directory_service_radius_settings.example d-926724cf57