{"id":48892,"date":"2023-03-02T03:35:41","date_gmt":"2023-07-27T00:47:46","guid":{"rendered":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8terraform%e5%9c%a8%e5%ae%9e%e8%b7%b5%e4%b8%ad%e7%ae%a1%e7%90%86aws-iam-identity-center%ef%bc%88aws-single-sign-on%ef%bc%89%e7%9a%84%e7%94%a8%e6%88%b7%e7%ae%a1%e7%90%86%e7%ad%96\/"},"modified":"2024-04-29T16:59:42","modified_gmt":"2024-04-29T08:59:42","slug":"%e4%bd%bf%e7%94%a8terraform%e5%9c%a8%e5%ae%9e%e8%b7%b5%e4%b8%ad%e7%ae%a1%e7%90%86aws-iam-identity-center%ef%bc%88aws-single-sign-on%ef%bc%89%e7%9a%84%e7%94%a8%e6%88%b7%e7%ae%a1%e7%90%86%e7%ad%96","status":"publish","type":"post","link":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8terraform%e5%9c%a8%e5%ae%9e%e8%b7%b5%e4%b8%ad%e7%ae%a1%e7%90%86aws-iam-identity-center%ef%bc%88aws-single-sign-on%ef%bc%89%e7%9a%84%e7%94%a8%e6%88%b7%e7%ae%a1%e7%90%86%e7%ad%96\/","title":{"rendered":"\u4f7f\u7528Terraform\u5728\u5b9e\u8df5\u4e2d\u7ba1\u7406AWS IAM Identity Center\uff08AWS Single Sign-On\uff09\u7684\u7528\u6237\u7ba1\u7406\u7b56\u7565"},"content":{"rendered":"

\u9996\u5148<\/h1>\n

\u6211\u6253\u7b97\u4f7f\u7528AWS IAM\u8eab\u4efd\u4e2d\u5fc3\uff08AWS\u5355\u70b9\u767b\u5f55\uff09\u6765\u8003\u8651\u7528\u6237\u7ba1\u7406\uff0c\u5e76\u4f7f\u7528Terraform\u5b9e\u73b0\u914d\u7f6e\u7ba1\u7406\u3002<\/p>\n

\u8bf7\u53c2\u8003\u6211\u5728GitHub\u4e0a\u4e0a\u4f20\u7684\u4ee3\u7801\u3002
\n\uff08\u6ce8\uff1a*.tfstate\u6587\u4ef6\u5df2\u7ecf\u88ab\u6dfb\u52a0\u5230.gitignore\u4e2d\uff0c\u4e0d\u53d7git\u7ba1\u7406\u3002\uff09<\/p>\n

 <\/p>\n

\u5efa\u9020\u56fe<\/h1>\n
\"\u30b9\u30af\u30ea\u30fc\u30f3\u30b7\u30e7\u30c3\u30c8<\/div>\n

\u8003\u8651\u5230\u53ef\u4ee5\u5728\u65e0\u670d\u52a1\u5668\u73af\u5883\u4e0b\u7ba1\u7406State\u6587\u4ef6\uff0c\u6211\u4eec\u9009\u62e9\u4f7f\u7528Terraform Cloud\u8fdb\u884c\u57fa\u7840\u67b6\u6784\u7ba1\u7406\u3002<\/p>\n

 <\/p>\n

\u53e6\u5916\uff0c\u5728\u8fd9\u4e2a\u95ee\u9898\u4e2d\u6211\u4eec\u6ca1\u6709\u8003\u8651\u5230\u5305\u62ec\u591a\u4e2a\u73af\u5883\u90e8\u7f72\u548cCI\/CD\u8bbe\u8ba1\u7b49\u65b9\u9762\u3002<\/p>\n

\u5b9e\u65bd<\/h1>\n

Terraform Cloud\u548cGithub\u7684\u8fde\u63a5<\/h2>\n

\u8bf7\u53c2\u8003\u6b64\u5904\u4ee5\u8fdb\u884cVSC\u8fde\u63a5\u3002<\/p>\n

 <\/p>\n

\u542f\u7528AWS SSO\/\u521b\u5efa\u7528\u6237\u7ec4\u3002<\/h2>\n

\u5f88\u62b1\u6b49\uff0c\u76ee\u524d\u7684 Terraform \u4ee3\u78bc\u8a2d\u5b9a\u5c1a\u4e0d\u652f\u63f4\u555f\u7528 AWS SSO\u3002\u56e0\u6b64\uff0c\u60a8\u9700\u8981\u5f9e\u63a7\u5236\u53f0\u9078\u64c7\u8981\u555f\u7528\u7684\u5730\u5340\uff0c\u4e26\u624b\u52d5\u9032\u884c\u555f\u7528\u4f5c\u696d\u3002<\/p>\n

\u63a5\u4e0b\u6765\uff0c\u5728AWS IAM\u8eab\u4efd\u4e2d\u5fc3\u521b\u5efa\u7528\u6237\/\u7ec4\uff0c\u4f46\u662f\u8fd9\u4e5f\u4e0d\u80fd\u901a\u8fc7Terraform\u521b\u5efa\u3002\u56e0\u6b64\uff0c\u5c06\u5728\u7ba1\u7406\u63a7\u5236\u53f0\u4e2d\u8fdb\u884c\u521b\u5efa\u3002<\/p>\n

\u6b64\u5916\uff0c\u60a8\u4e5f\u53ef\u4ee5\u5728\u8fd9\u91cc\u5c06\u5e0c\u671b\u52a0\u5165\u7fa4\u7ec4\u7684\u7528\u6237\u8fdb\u884c\u6dfb\u52a0\u3002<\/p>\n

\"\u30b9\u30af\u30ea\u30fc\u30f3\u30b7\u30e7\u30c3\u30c8<\/div>\n
\"\u30b9\u30af\u30ea\u30fc\u30f3\u30b7\u30e7\u30c3\u30c8<\/div>\n

\u653f\u7b56<\/h2>\n

\u672c\u6b21\u6211\u4eec\u51c6\u5907\u4e86\u7ba1\u7406\u5458\u3001\u5f00\u53d1\u4eba\u5458\u3001\u8bbf\u5ba2\u548c\u7cfb\u7edf\u56db\u4e2a\u7ec4\uff0c\u5e76\u9884\u5148\u786e\u5b9a\u4e86\u5206\u914d\u7ed9\u6bcf\u4e2a\u7ec4\u7684\u7b56\u7565\u3002<\/p>\n

\u7ba1\u7406\u5458\uff1aSRE\u56e2\u961f\u7528\u6237\u6240\u5c5e\u7684\u7ec4\u3002\u6388\u4e88AdministratorAccess\u6743\u9650\u3002
\n\u5f00\u53d1\u8005\uff1a\u9664SRE\u56e2\u961f\u4e4b\u5916\u7684\u5f00\u53d1\u8005\u7ec4\u3002\u6388\u4e88\u5bf9\u5f00\u53d1\u5de5\u4f5c\u6240\u9700\u6700\u4f4e\u9650\u5ea6\u7684\u8bbf\u95ee\u6743\u9650\u3002
\n\u8bbf\u5ba2\uff1a\u9664\u5f00\u53d1\u56e2\u961f\u4e4b\u5916\u7684\u7ec4\u3002\u4e3b\u8981\u662f\u53ea\u8bfb\u8bbf\u95ee\u6743\u9650\u3002
\n\u7cfb\u7edf\uff1a\u6574\u5408\u7528\u4e8e\u7cfb\u7edf\u76f8\u5173\u7684IAM\u7b56\u7565\u3002<\/p>\n

\u8bbe\u5b9a\u5c06Admin\u7ec4\u9644\u52a0Admin\u7684\u6743\u9650\u96c6\u3002<\/p>\n

\u90e8\u7f72<\/h2>\n

\u5df2\u7ecf\u5b9e\u65bd\u7684\u6709\u4ee5\u4e0b\u9879\u76ee\u3002<\/p>\n

\u7531\u4e8e\u4f7f\u7528Terraform\u8d44\u6e90\u7684\u5dee\u5f02\uff0c\u6211\u5206\u522b\u5b9a\u4e49\u4e86\u7ba1\u7406\u7b56\u7565\u548c\u5ba2\u6237\u7ba1\u7406\u7b56\u7565\u4e2d\u8981\u4f7f\u7528\u7684\u53d8\u91cf\u3002<\/p>\n

########################################<\/span>\r\n# Terraform\u3067\u304d\u306a\u3044\u3053\u3068<\/span>\r\n# \u4e0b\u8a18\u306b\u793a\u3059\u3082\u306e\u306fTerraform\u3067\u306f\u3067\u304d\u306a\u3044\u306e\u3067\u3001\u624b\u52d5\u3067\u30b3\u30f3\u30bd\u30fc\u30eb\u4e0a\uff08IAM Identity Center\uff09\u304b\u3089\u8a2d\u5b9a\u3059\u308b\u5fc5\u8981\u304c\u3042\u308b<\/span>\r\n\r\n# 1. \u30b0\u30eb\u30fc\u30d7\u306e\u4f5c\u6210\u30fb\u524a\u9664<\/span>\r\n# 2. \u30e6\u30fc\u30b6\u30fc\u306e\u8ffd\u52a0\u30fb\u524a\u9664<\/span>\r\n# 3. \u30b0\u30eb\u30fc\u30d7\u306b\u30e6\u30fc\u30b6\u30fc\u3092\u8ffd\u52a0\u30fb\u524a\u9664<\/span>\r\n########################################<\/span>\r\n\r\ndata<\/span> \"aws_ssoadmin_instances\"<\/span> \"example\"<\/span> {}<\/span>\r\n\r\nlocals<\/span> {<\/span>\r\n  groups<\/span> =<\/span> var<\/span>.<\/span>aws_sso_group<\/span>\r\n  policies<\/span> =<\/span> {<\/span>\r\n    Admin<\/span> =<\/span> {<\/span>\r\n      managed<\/span>  =<\/span> var<\/span>.<\/span>aws_sso_admin_managed_policies<\/span>\r\n      customer<\/span> =<\/span> var<\/span>.<\/span>aws_sso_admin_customer_policies<\/span>\r\n    }<\/span>\r\n    Guest<\/span> =<\/span> {<\/span>\r\n      managed<\/span>  =<\/span> var<\/span>.<\/span>aws_sso_guest_managed_policies<\/span>\r\n      customer<\/span> =<\/span> var<\/span>.<\/span>aws_sso_guest_customer_policies<\/span>\r\n    }<\/span>\r\n    Developer<\/span> =<\/span> {<\/span>\r\n      managed<\/span>  =<\/span> var<\/span>.<\/span>aws_sso_developer_managed_policies<\/span>\r\n      customer<\/span> =<\/span> var<\/span>.<\/span>aws_sso_developer_customer_policies<\/span>\r\n    }<\/span>\r\n    System<\/span> =<\/span> {<\/span>\r\n      managed<\/span>  =<\/span> var<\/span>.<\/span>aws_sso_system_managed_policies<\/span>\r\n      customer<\/span> =<\/span> var<\/span>.<\/span>aws_sso_system_customer_policies<\/span>\r\n    }<\/span>\r\n  }<\/span>\r\n  managed_policy_attachments<\/span> =<\/span> flatten<\/span>([<\/span>\r\n    for<\/span> group<\/span>,<\/span> policies<\/span> in<\/span> local<\/span>.<\/span>policies<\/span> :<\/span> [<\/span>\r\n      for<\/span> policy<\/span> in<\/span> policies<\/span>.<\/span>managed<\/span> :<\/span> {<\/span>\r\n        group<\/span>  =<\/span> group<\/span>\r\n        policy<\/span> =<\/span> policy<\/span>\r\n      }<\/span>\r\n    ]<\/span>\r\n  ])<\/span>\r\n  customer_policy_attachments<\/span> =<\/span> flatten<\/span>([<\/span>\r\n    for<\/span> group<\/span>,<\/span> policies<\/span> in<\/span> local<\/span>.<\/span>policies<\/span> :<\/span> [<\/span>\r\n      for<\/span> policy<\/span> in<\/span> policies<\/span>.<\/span>customer<\/span> :<\/span> {<\/span>\r\n        group<\/span>  =<\/span> group<\/span>\r\n        policy<\/span> =<\/span> policy<\/span>\r\n      }<\/span>\r\n    ]<\/span>\r\n  ])<\/span>\r\n}<\/span>\r\n\r\n########################################<\/span>\r\n# IAM Identity Center \u30b0\u30eb\u30fc\u30d7\u3092\u53d6\u5f97<\/span>\r\n########################################<\/span>\r\ndata<\/span> \"aws_identitystore_group\"<\/span> \"group\"<\/span> {<\/span>\r\n  for_each<\/span> =<\/span> toset<\/span>(<\/span>local<\/span>.<\/span>groups<\/span>)<\/span>\r\n\r\n  identity_store_id<\/span> =<\/span> tolist<\/span>(<\/span>data<\/span>.<\/span>aws_ssoadmin_instances<\/span>.<\/span>example<\/span>.<\/span>identity_store_ids<\/span>)[<\/span>0<\/span>]<\/span>\r\n\r\n  alternate_identifier<\/span> {<\/span>\r\n    unique_attribute<\/span> {<\/span>\r\n      attribute_path<\/span>  =<\/span> \"DisplayName\"<\/span>\r\n      attribute_value<\/span> =<\/span> each<\/span>.<\/span>value<\/span>\r\n    }<\/span>\r\n  }<\/span>\r\n}<\/span>\r\n########################################<\/span>\r\n# \u30a2\u30af\u30bb\u30b9\u8a31\u53ef\u30bb\u30c3\u30c8\u4f5c\u6210<\/span>\r\n########################################<\/span>\r\nresource<\/span> \"aws_ssoadmin_permission_set\"<\/span> \"PermissionSet\"<\/span> {<\/span>\r\n  for_each<\/span> =<\/span> toset<\/span>(<\/span>local<\/span>.<\/span>groups<\/span>)<\/span>\r\n\r\n  name<\/span>         =<\/span> each<\/span>.<\/span>value<\/span>\r\n  description<\/span>  =<\/span> each<\/span>.<\/span>value<\/span>\r\n  instance_arn<\/span> =<\/span> tolist<\/span>(<\/span>data<\/span>.<\/span>aws_ssoadmin_instances<\/span>.<\/span>example<\/span>.<\/span>arns<\/span>)[<\/span>0<\/span>]<\/span>\r\n}<\/span>\r\nlocals<\/span> {<\/span>\r\n  groups_to_permission_set<\/span> =<\/span> var<\/span>.<\/span>groups_to_permission_set<\/span>\r\n  assignment<\/span> =<\/span> [<\/span>\r\n    for<\/span> tmp<\/span> in<\/span> setproduct<\/span>(<\/span>local<\/span>.<\/span>groups<\/span>,<\/span> values<\/span>(<\/span>data<\/span>.<\/span>aws_identitystore_group<\/span>.<\/span>group<\/span>))<\/span> :<\/span> {<\/span>\r\n      group_name<\/span>          =<\/span> tmp<\/span>[<\/span>0<\/span>]<\/span>\r\n      group_id<\/span>            =<\/span> tmp<\/span>[<\/span>1<\/span>].<\/span>group_id<\/span>\r\n      permission_set_name<\/span> =<\/span> local<\/span>.<\/span>groups_to_permission_set<\/span>[<\/span>tmp<\/span>[<\/span>0<\/span>]]<\/span>\r\n    }<\/span>\r\n  ]<\/span>\r\n}<\/span>\r\n########################################<\/span>\r\n# \u30a2\u30af\u30bb\u30b9\u8a31\u53ef\u30bb\u30c3\u30c8\u306b\u30dd\u30ea\u30b7\u30fc\u3092\u30a2\u30bf\u30c3\u30c1<\/span>\r\n########################################<\/span>\r\nresource<\/span> \"aws_ssoadmin_managed_policy_attachment\"<\/span> \"managed_policy_attachment\"<\/span> {<\/span>\r\n  for_each<\/span> =<\/span> {<\/span> for<\/span> item<\/span> in<\/span> local<\/span>.<\/span>managed_policy_attachments<\/span> :<\/span> \"<\/span>${<\/span>item<\/span>.<\/span>group<\/span>}<\/span>.<\/span>${<\/span>item<\/span>.<\/span>policy<\/span>}<\/span>\"<\/span> =<\/span>><\/span> item<\/span> }<\/span>\r\n\r\n  instance_arn<\/span>       =<\/span> aws_ssoadmin_permission_set<\/span>.<\/span>PermissionSet<\/span>[<\/span>each<\/span>.<\/span>value<\/span>.<\/span>group<\/span>].<\/span>instance_arn<\/span>\r\n  managed_policy_arn<\/span> =<\/span> each<\/span>.<\/span>value<\/span>.<\/span>policy<\/span>\r\n  permission_set_arn<\/span> =<\/span> aws_ssoadmin_permission_set<\/span>.<\/span>PermissionSet<\/span>[<\/span>each<\/span>.<\/span>value<\/span>.<\/span>group<\/span>].<\/span>arn<\/span>\r\n}<\/span>\r\n\r\nresource<\/span> \"aws_ssoadmin_customer_managed_policy_attachment\"<\/span> \"customer_policy_attachment\"<\/span> {<\/span>\r\n  for_each<\/span> =<\/span> {<\/span> for<\/span> item<\/span> in<\/span> local<\/span>.<\/span>customer_policy_attachments<\/span> :<\/span> \"<\/span>${<\/span>item<\/span>.<\/span>group<\/span>}<\/span>.<\/span>${<\/span>item<\/span>.<\/span>policy<\/span>}<\/span>\"<\/span> =<\/span>><\/span> item<\/span> }<\/span>\r\n\r\n  instance_arn<\/span>       =<\/span> aws_ssoadmin_permission_set<\/span>.<\/span>PermissionSet<\/span>[<\/span>each<\/span>.<\/span>value<\/span>.<\/span>group<\/span>].<\/span>instance_arn<\/span>\r\n  permission_set_arn<\/span> =<\/span> aws_ssoadmin_permission_set<\/span>.<\/span>PermissionSet<\/span>[<\/span>each<\/span>.<\/span>value<\/span>.<\/span>group<\/span>].<\/span>arn<\/span>\r\n  customer_managed_policy_reference<\/span> {<\/span>\r\n    name<\/span> =<\/span> split<\/span>(<\/span>\"\/\"<\/span>,<\/span> each<\/span>.<\/span>value<\/span>.<\/span>policy<\/span>)[<\/span>1<\/span>]<\/span>\r\n    path<\/span> =<\/span> \"\/\"<\/span>\r\n  }<\/span>\r\n}<\/span>\r\n########################################<\/span>\r\n# IAM Identity Center \u30b0\u30eb\u30fc\u30d7\u306b\u30a2\u30af\u30bb\u30b9\u8a31\u53ef\u30bb\u30c3\u30c8\u3092\u95a2\u9023\u4ed8\u3051<\/span>\r\n########################################<\/span>\r\nresource<\/span> \"aws_ssoadmin_account_assignment\"<\/span> \"example\"<\/span> {<\/span>\r\n  for_each<\/span> =<\/span> data<\/span>.<\/span>aws_identitystore_group<\/span>.<\/span>group<\/span>\r\n\r\n  instance_arn<\/span>       =<\/span> aws_ssoadmin_permission_set<\/span>.<\/span>PermissionSet<\/span>[<\/span>each<\/span>.<\/span>key<\/span>].<\/span>instance_arn<\/span>\r\n  permission_set_arn<\/span> =<\/span> aws_ssoadmin_permission_set<\/span>.<\/span>PermissionSet<\/span>[<\/span>each<\/span>.<\/span>key<\/span>].<\/span>arn<\/span>\r\n\r\n  principal_id<\/span>   =<\/span> each<\/span>.<\/span>value<\/span>.<\/span>group_id<\/span>\r\n  principal_type<\/span> =<\/span> \"GROUP\"<\/span>\r\n\r\n  target_id<\/span>   =<\/span> var<\/span>.<\/span>account_id<\/span>\r\n  target_type<\/span> =<\/span> \"AWS_ACCOUNT\"<\/span>\r\n}<\/span>\r\n\r\n<\/code><\/pre>\n
# variables.tf\u306fvariable(\u5909\u6570)\u306e\u5ba3\u8a00\u3092\u884c\u3046\u3068\u3053\u308d\u3067\u3059\u3002<\/span>\r\nvariable<\/span> \"region\"<\/span> {<\/span>\r\n  description<\/span> =<\/span> \"AWS region\"<\/span>\r\n  default<\/span>     =<\/span> \"ap-northeast-1\"<\/span>\r\n}<\/span>\r\n# terraform cloud\u304b\u3089\u53d6\u5f97<\/span>\r\nvariable<\/span> \"AWS_ACCESS_KEY_ID\"<\/span> {}<\/span>\r\nvariable<\/span> \"AWS_SECRET_ACCESS_KEY\"<\/span> {}<\/span>\r\n\r\nvariable<\/span> \"account_id\"<\/span> {<\/span>\r\n  description<\/span> =<\/span> \"The ID of the AWS account\"<\/span>\r\n  type<\/span>        =<\/span> string<\/span>\r\n  # 12\u6841\u306e\u30a2\u30ab\u30a6\u30f3\u30c8ID<\/span>\r\n  default<\/span>     =<\/span> \"xxxxxxxxxxxx\"<\/span>\r\n}<\/span>\r\n\r\n\r\n########################################<\/span>\r\n# IAM Identity Center\u306e\u30b0\u30eb\u30fc\u30d7\u30fb\u8a31\u53ef\u30bb\u30c3\u30c8\u3092\u5b9a\u7fa9<\/span>\r\n# \u30b0\u30eb\u30fc\u30d7\u306b\u306f\u540c\u540d\u306e\u8a31\u53ef\u30bb\u30c3\u30c8\u3092\u95a2\u9023\u4ed8\u3051\u308b<\/span>\r\n########################################<\/span>\r\nvariable<\/span> \"aws_sso_group\"<\/span> {<\/span>\r\n  description<\/span> =<\/span> \"The list of identity store group\"<\/span>\r\n  type<\/span>        =<\/span> list<\/span>(<\/span>string<\/span>)<\/span>\r\n  default<\/span>     =<\/span> [<\/span>\"Admin\"<\/span>,<\/span> \"Guest\"<\/span>,<\/span> \"Developer\"<\/span>,<\/span> \"System\"<\/span>]<\/span>\r\n  \/\/ Add more if needed<\/span>\r\n}<\/span>\r\n\r\nvariable<\/span> \"groups_to_permission_set\"<\/span> {<\/span>\r\n  type<\/span> =<\/span> map<\/span>(<\/span>any<\/span>)<\/span>\r\n  default<\/span> =<\/span> {<\/span>\r\n    Admin<\/span>     =<\/span> \"Admin\"<\/span>\r\n    Guest<\/span>     =<\/span> \"Guest\"<\/span>\r\n    Developer<\/span> =<\/span> \"Developer\"<\/span>\r\n    System<\/span>    =<\/span> \"System\"<\/span>\r\n    \/\/ Add more if needed<\/span>\r\n  }<\/span>\r\n}<\/span>\r\n########################################<\/span>\r\n# \u30b0\u30eb\u30fc\u30d7\u3054\u3068\u306b\u4f7f\u7528\u3059\u308b\u30dd\u30ea\u30b7\u30fc\u306earn\u3092\u6307\u5b9a<\/span>\r\n# managed\u30dd\u30ea\u30b7\u30fc\u3068\u30ab\u30b9\u30bf\u30de\u30fc\u7ba1\u7406\u30dd\u30ea\u30b7\u30fc\u3067\u306f\u4f5c\u6210\u3059\u308bresource\u304c\u7570\u306a\u308b\u306e\u3067\u3001\u305d\u308c\u305e\u308cvariable\u3092\u7528\u610f<\/span>\r\n########################################<\/span>\r\n## Admin<\/span>\r\nvariable<\/span> \"aws_sso_admin_managed_policies\"<\/span> {<\/span>\r\n  description<\/span> =<\/span> \"The list of admin managed policies\"<\/span>\r\n  type<\/span>        =<\/span> list<\/span>(<\/span>string<\/span>)<\/span>\r\n  default<\/span> =<\/span> [<\/span>\r\n    \"arn:aws:iam::aws:policy\/AdministratorAccess\"<\/span>\r\n  ]<\/span>\r\n}<\/span>\r\nvariable<\/span> \"aws_sso_admin_customer_policies\"<\/span> {<\/span>\r\n  description<\/span> =<\/span> \"The list of admin customer policies\"<\/span>\r\n  type<\/span>        =<\/span> list<\/span>(<\/span>string<\/span>)<\/span>\r\n  default<\/span>     =<\/span> []<\/span>\r\n}<\/span>\r\n## Guest<\/span>\r\nvariable<\/span> \"aws_sso_guest_managed_policies\"<\/span> {<\/span>\r\n  description<\/span> =<\/span> \"The list of guest managed policies\"<\/span>\r\n  type<\/span>        =<\/span> list<\/span>(<\/span>string<\/span>)<\/span>\r\n  default<\/span> =<\/span> []<\/span>\r\n}<\/span>\r\nvariable<\/span> \"aws_sso_guest_customer_policies\"<\/span> {<\/span>\r\n  description<\/span> =<\/span> \"The list of guest customer policies\"<\/span>\r\n  type<\/span>        =<\/span> list<\/span>(<\/span>string<\/span>)<\/span>\r\n  default<\/span> =<\/span> []<\/span>\r\n}<\/span>\r\n## Developer<\/span>\r\nvariable<\/span> \"aws_sso_developer_managed_policies\"<\/span> {<\/span>\r\n  description<\/span> =<\/span> \"The list of developer managed policies\"<\/span>\r\n  type<\/span>        =<\/span> list<\/span>(<\/span>string<\/span>)<\/span>\r\n  default<\/span> =<\/span> []<\/span>\r\n}<\/span>\r\nvariable<\/span> \"aws_sso_developer_customer_policies\"<\/span> {<\/span>\r\n  description<\/span> =<\/span> \"The list of developer customer policies\"<\/span>\r\n  type<\/span>        =<\/span> list<\/span>(<\/span>string<\/span>)<\/span>\r\n  default<\/span> =<\/span> []<\/span>\r\n}<\/span>\r\n## System<\/span>\r\nvariable<\/span> \"aws_sso_system_managed_policies\"<\/span> {<\/span>\r\n  description<\/span> =<\/span> \"The list of system managed policies\"<\/span>\r\n  type<\/span>        =<\/span> list<\/span>(<\/span>string<\/span>)<\/span>\r\n  default<\/span> =<\/span> []<\/span>\r\n}<\/span>\r\n\r\nvariable<\/span> \"aws_sso_system_customer_policies\"<\/span> {<\/span>\r\n  description<\/span> =<\/span> \"The list of system customer policies\"<\/span>\r\n  type<\/span>        =<\/span> list<\/span>(<\/span>string<\/span>)<\/span>\r\n  default<\/span> =<\/span> []<\/span>\r\n}<\/span>\r\n\r\n<\/code><\/pre>\n
\u5982\u679c\u6267\u884cgit push\uff0c\u5c06\u4f1a\u89e6\u53d1\u5bf9\u4e3b\u5206\u652f\u7684\u5408\u5e76\uff0c\u5e76\u6267\u884cterraform plan\u548cterraform apply\u3002<\/p>\n
\u5728\u8fdb\u884c git push \u4e4b\u524d\uff0c\u6700\u597d\u901a\u8fc7\u4f7f\u7528 terraform fmt \u8fdb\u884c\u683c\u5f0f\u6574\u7406\uff08\u6216\u5c06\u5176\u96c6\u6210\u5230 CI\/CD \u4e2d\uff09\u3002<\/p>\n
\u6700\u540e<\/h1>\n
\u901a\u8fc7\u8fd9\u6b21\u7684\u5b9e\u65bd\uff0c\u6211\u60f3\u5206\u4eab\u6211\u6240\u5f97\u5230\u7684\u6d1e\u5bdf\u548c\u5b66\u4e60\u3002<\/p>\n
    \n
  • \n
      Terraform\u3000Cloud\u3092\u4f7f\u7528\u3059\u308b\u3068state\u30d5\u30a1\u30a4\u30eb\u306e\u7ba1\u7406\u304c\u3059\u3054\u304f\u697d<\/ul>\n<\/li>\n<\/ul>\n
       <\/p>\n
        \n
      • \n
          Terraform\u3067\u5bfe\u5fdc\u3057\u3066\u3044\u306a\u3044\u30ea\u30bd\u30fc\u30b9\u306eIaC\u3092\u3069\u306e\u3088\u3046\u306b\u7ba1\u7406\u30fb\u904b\u7528\u3057\u3066\u3044\u304f\u304b\u30c1\u30fc\u30e0\u3067\u5171\u901a\u8a8d\u8b58\u3092\u4f5c\u308b\u5fc5\u8981\u304c\u3042\u308b<\/ul>\n<\/li>\n<\/ul>\n
           <\/p>\n
            \n
          • \n
              \u3069\u3053\u307e\u3067\u3092variable, local\u3068\u3044\u3063\u305f\u5909\u6570\u3068\u3057\u3066\u6271\u3046\u304b\u306e\u5224\u65ad\u304c\u96e3\u3057\u3044<\/ul>\n<\/li>\n<\/ul>\n
               <\/p>\n
                Terraform\u306f\u697d\u3057\u3044?<\/ul>\n
                \u8bf7\u63d0\u4f9b\u4f60\u9700\u8981\u6539\u5199\u7684\u82f1\u6587\u53e5\u5b50\uff0c\u6211\u5c06\u4e3a\u60a8\u63d0\u4f9b\u4e2d\u6587\u7684\u540c\u4e49\u53e5\u3002<\/h1>\n
                \u3010\u571f\u6539\u3011<\/h2>\n
                 <\/p>\n
                \u3010Terraform Cloud\u3011\u571f\u58e4\u4e91<\/h2>\n
                 <\/p>\n
                \u3010AWS SSO\u3011\u4e9a\u9a6c\u900a\u5355\u4e00\u767b\u5f55<\/h2>\n
                 <\/p>\n","protected":false},"excerpt":{"rendered":"
                \u9996\u5148 \u6211\u6253\u7b97\u4f7f\u7528AWS IAM\u8eab\u4efd\u4e2d\u5fc3\uff08AWS\u5355\u70b9\u767b\u5f55\uff09\u6765\u8003\u8651\u7528\u6237\u7ba1\u7406\uff0c\u5e76\u4f7f\u7528Terraform\u5b9e\u73b0\u914d\u7f6e\u7ba1\u7406\u3002 […]<\/p>\n","protected":false},"author":12,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-48892","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"yoast_head":"\n\u4f7f\u7528Terraform\u5728\u5b9e\u8df5\u4e2d\u7ba1\u7406AWS IAM Identity Center\uff08AWS Single Sign-On\uff09\u7684\u7528\u6237\u7ba1\u7406\u7b56\u7565 - Blog - Silicon Cloud<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.silicloud.com\/zh\/blog\/\u4f7f\u7528terraform\u5728\u5b9e\u8df5\u4e2d\u7ba1\u7406aws-iam-identity-center\uff08aws-single-sign-on\uff09\u7684\u7528\u6237\u7ba1\u7406\u7b56\/\" \/>\n<meta property=\"og:locale\" content=\"zh_CN\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"\u4f7f\u7528Terraform\u5728\u5b9e\u8df5\u4e2d\u7ba1\u7406AWS IAM Identity Center\uff08AWS Single Sign-On\uff09\u7684\u7528\u6237\u7ba1\u7406\u7b56\u7565\" \/>\n<meta property=\"og:description\" content=\"\u9996\u5148 \u6211\u6253\u7b97\u4f7f\u7528AWS IAM\u8eab\u4efd\u4e2d\u5fc3\uff08AWS\u5355\u70b9\u767b\u5f55\uff09\u6765\u8003\u8651\u7528\u6237\u7ba1\u7406\uff0c\u5e76\u4f7f\u7528Terraform\u5b9e\u73b0\u914d\u7f6e\u7ba1\u7406\u3002 […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.silicloud.com\/zh\/blog\/\u4f7f\u7528terraform\u5728\u5b9e\u8df5\u4e2d\u7ba1\u7406aws-iam-identity-center\uff08aws-single-sign-on\uff09\u7684\u7528\u6237\u7ba1\u7406\u7b56\/\" \/>\n<meta property=\"og:site_name\" content=\"Blog - Silicon Cloud\" \/>\n<meta property=\"article:published_time\" content=\"2023-07-27T00:47:46+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-04-29T08:59:42+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d8828913a08637a6c2368\/5-0.png\" \/>\n<meta name=\"author\" content=\"\u9038, \u79d1\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u4f5c\u8005\" \/>\n\t<meta name=\"twitter:data1\" content=\"\u9038, \u79d1\" \/>\n\t<meta name=\"twitter:label2\" content=\"\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 \u5206\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8terraform%e5%9c%a8%e5%ae%9e%e8%b7%b5%e4%b8%ad%e7%ae%a1%e7%90%86aws-iam-identity-center%ef%bc%88aws-single-sign-on%ef%bc%89%e7%9a%84%e7%94%a8%e6%88%b7%e7%ae%a1%e7%90%86%e7%ad%96\/\",\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8terraform%e5%9c%a8%e5%ae%9e%e8%b7%b5%e4%b8%ad%e7%ae%a1%e7%90%86aws-iam-identity-center%ef%bc%88aws-single-sign-on%ef%bc%89%e7%9a%84%e7%94%a8%e6%88%b7%e7%ae%a1%e7%90%86%e7%ad%96\/\",\"name\":\"\u4f7f\u7528Terraform\u5728\u5b9e\u8df5\u4e2d\u7ba1\u7406AWS IAM Identity Center\uff08AWS Single Sign-On\uff09\u7684\u7528\u6237\u7ba1\u7406\u7b56\u7565 - Blog - Silicon Cloud\",\"isPartOf\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#website\"},\"datePublished\":\"2023-07-27T00:47:46+00:00\",\"dateModified\":\"2024-04-29T08:59:42+00:00\",\"author\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/85c1dae56e6ea1e695c73d33c684d487\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8terraform%e5%9c%a8%e5%ae%9e%e8%b7%b5%e4%b8%ad%e7%ae%a1%e7%90%86aws-iam-identity-center%ef%bc%88aws-single-sign-on%ef%bc%89%e7%9a%84%e7%94%a8%e6%88%b7%e7%ae%a1%e7%90%86%e7%ad%96\/#breadcrumb\"},\"inLanguage\":\"zh-Hans\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8terraform%e5%9c%a8%e5%ae%9e%e8%b7%b5%e4%b8%ad%e7%ae%a1%e7%90%86aws-iam-identity-center%ef%bc%88aws-single-sign-on%ef%bc%89%e7%9a%84%e7%94%a8%e6%88%b7%e7%ae%a1%e7%90%86%e7%ad%96\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8terraform%e5%9c%a8%e5%ae%9e%e8%b7%b5%e4%b8%ad%e7%ae%a1%e7%90%86aws-iam-identity-center%ef%bc%88aws-single-sign-on%ef%bc%89%e7%9a%84%e7%94%a8%e6%88%b7%e7%ae%a1%e7%90%86%e7%ad%96\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u9996\u9875\",\"item\":\"https:\/\/www.silicloud.com\/zh\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"\u4f7f\u7528Terraform\u5728\u5b9e\u8df5\u4e2d\u7ba1\u7406AWS IAM Identity Center\uff08AWS Single Sign-On\uff09\u7684\u7528\u6237\u7ba1\u7406\u7b56\u7565\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#website\",\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/\",\"name\":\"Blog - Silicon Cloud\",\"description\":\"\",\"inLanguage\":\"zh-Hans\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/85c1dae56e6ea1e695c73d33c684d487\",\"name\":\"\u9038, \u79d1\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/c94f6d9cbbfbca863fab309840bd690c153c95f8490c290ad2ed54dd693dad16?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/c94f6d9cbbfbca863fab309840bd690c153c95f8490c290ad2ed54dd693dad16?s=96&d=mm&r=g\",\"caption\":\"\u9038, \u79d1\"},\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/author\/keyi\/\"},{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8terraform%e5%9c%a8%e5%ae%9e%e8%b7%b5%e4%b8%ad%e7%ae%a1%e7%90%86aws-iam-identity-center%ef%bc%88aws-single-sign-on%ef%bc%89%e7%9a%84%e7%94%a8%e6%88%b7%e7%ae%a1%e7%90%86%e7%ad%96\/#local-main-organization-logo\",\"url\":\"\",\"contentUrl\":\"\",\"caption\":\"Blog - Silicon Cloud\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"\u4f7f\u7528Terraform\u5728\u5b9e\u8df5\u4e2d\u7ba1\u7406AWS IAM Identity Center\uff08AWS Single Sign-On\uff09\u7684\u7528\u6237\u7ba1\u7406\u7b56\u7565 - Blog - Silicon Cloud","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.silicloud.com\/zh\/blog\/\u4f7f\u7528terraform\u5728\u5b9e\u8df5\u4e2d\u7ba1\u7406aws-iam-identity-center\uff08aws-single-sign-on\uff09\u7684\u7528\u6237\u7ba1\u7406\u7b56\/","og_locale":"zh_CN","og_type":"article","og_title":"\u4f7f\u7528Terraform\u5728\u5b9e\u8df5\u4e2d\u7ba1\u7406AWS IAM Identity Center\uff08AWS Single Sign-On\uff09\u7684\u7528\u6237\u7ba1\u7406\u7b56\u7565","og_description":"\u9996\u5148 \u6211\u6253\u7b97\u4f7f\u7528AWS IAM\u8eab\u4efd\u4e2d\u5fc3\uff08AWS\u5355\u70b9\u767b\u5f55\uff09\u6765\u8003\u8651\u7528\u6237\u7ba1\u7406\uff0c\u5e76\u4f7f\u7528Terraform\u5b9e\u73b0\u914d\u7f6e\u7ba1\u7406\u3002 […]","og_url":"https:\/\/www.silicloud.com\/zh\/blog\/\u4f7f\u7528terraform\u5728\u5b9e\u8df5\u4e2d\u7ba1\u7406aws-iam-identity-center\uff08aws-single-sign-on\uff09\u7684\u7528\u6237\u7ba1\u7406\u7b56\/","og_site_name":"Blog - Silicon Cloud","article_published_time":"2023-07-27T00:47:46+00:00","article_modified_time":"2024-04-29T08:59:42+00:00","og_image":[{"url":"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d8828913a08637a6c2368\/5-0.png"}],"author":"\u9038, \u79d1","twitter_card":"summary_large_image","twitter_misc":{"\u4f5c\u8005":"\u9038, \u79d1","\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4":"3 \u5206"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8terraform%e5%9c%a8%e5%ae%9e%e8%b7%b5%e4%b8%ad%e7%ae%a1%e7%90%86aws-iam-identity-center%ef%bc%88aws-single-sign-on%ef%bc%89%e7%9a%84%e7%94%a8%e6%88%b7%e7%ae%a1%e7%90%86%e7%ad%96\/","url":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8terraform%e5%9c%a8%e5%ae%9e%e8%b7%b5%e4%b8%ad%e7%ae%a1%e7%90%86aws-iam-identity-center%ef%bc%88aws-single-sign-on%ef%bc%89%e7%9a%84%e7%94%a8%e6%88%b7%e7%ae%a1%e7%90%86%e7%ad%96\/","name":"\u4f7f\u7528Terraform\u5728\u5b9e\u8df5\u4e2d\u7ba1\u7406AWS IAM Identity Center\uff08AWS Single Sign-On\uff09\u7684\u7528\u6237\u7ba1\u7406\u7b56\u7565 - Blog - Silicon Cloud","isPartOf":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/#website"},"datePublished":"2023-07-27T00:47:46+00:00","dateModified":"2024-04-29T08:59:42+00:00","author":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/85c1dae56e6ea1e695c73d33c684d487"},"breadcrumb":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8terraform%e5%9c%a8%e5%ae%9e%e8%b7%b5%e4%b8%ad%e7%ae%a1%e7%90%86aws-iam-identity-center%ef%bc%88aws-single-sign-on%ef%bc%89%e7%9a%84%e7%94%a8%e6%88%b7%e7%ae%a1%e7%90%86%e7%ad%96\/#breadcrumb"},"inLanguage":"zh-Hans","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8terraform%e5%9c%a8%e5%ae%9e%e8%b7%b5%e4%b8%ad%e7%ae%a1%e7%90%86aws-iam-identity-center%ef%bc%88aws-single-sign-on%ef%bc%89%e7%9a%84%e7%94%a8%e6%88%b7%e7%ae%a1%e7%90%86%e7%ad%96\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8terraform%e5%9c%a8%e5%ae%9e%e8%b7%b5%e4%b8%ad%e7%ae%a1%e7%90%86aws-iam-identity-center%ef%bc%88aws-single-sign-on%ef%bc%89%e7%9a%84%e7%94%a8%e6%88%b7%e7%ae%a1%e7%90%86%e7%ad%96\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u9996\u9875","item":"https:\/\/www.silicloud.com\/zh\/blog\/"},{"@type":"ListItem","position":2,"name":"\u4f7f\u7528Terraform\u5728\u5b9e\u8df5\u4e2d\u7ba1\u7406AWS IAM Identity Center\uff08AWS Single Sign-On\uff09\u7684\u7528\u6237\u7ba1\u7406\u7b56\u7565"}]},{"@type":"WebSite","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#website","url":"https:\/\/www.silicloud.com\/zh\/blog\/","name":"Blog - Silicon Cloud","description":"","inLanguage":"zh-Hans"},{"@type":"Person","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/85c1dae56e6ea1e695c73d33c684d487","name":"\u9038, \u79d1","image":{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/c94f6d9cbbfbca863fab309840bd690c153c95f8490c290ad2ed54dd693dad16?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/c94f6d9cbbfbca863fab309840bd690c153c95f8490c290ad2ed54dd693dad16?s=96&d=mm&r=g","caption":"\u9038, \u79d1"},"url":"https:\/\/www.silicloud.com\/zh\/blog\/author\/keyi\/"},{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8terraform%e5%9c%a8%e5%ae%9e%e8%b7%b5%e4%b8%ad%e7%ae%a1%e7%90%86aws-iam-identity-center%ef%bc%88aws-single-sign-on%ef%bc%89%e7%9a%84%e7%94%a8%e6%88%b7%e7%ae%a1%e7%90%86%e7%ad%96\/#local-main-organization-logo","url":"","contentUrl":"","caption":"Blog - Silicon Cloud"}]}},"_links":{"self":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/48892","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/users\/12"}],"replies":[{"embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/comments?post=48892"}],"version-history":[{"count":2,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/48892\/revisions"}],"predecessor-version":[{"id":86505,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/48892\/revisions\/86505"}],"wp:attachment":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/media?parent=48892"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/categories?post=48892"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/tags?post=48892"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}