# Google Cloud Unit Folders Module
This module allows creation and management of an organizational hierarchy "unit" composed of a parent folder (usually mapped to a business unit or team), and a set of child folders (usually mapped to environments) each with a corresponding set of service accounts, IAM bindings and GCS buckets.
## Example
```hcl
module "folders-unit" {
source = "./modules/folders-unit"
name = "Business Intelligence"
short_name = "bi"
automation_project_id = "automation-project-394yr923811"
billing_account_id = "015617-16GHBC-AF02D9"
organization_id = "506128240800"
root_node = "folders/93469270123701"
prefix = "unique-prefix"
environments = {
dev = "Development",
test = "Testing",
prod = "Production"
}
service_account_keys = true
}
# tftest modules=1 resources=37
```
## Variables
| name | description | type | required | default |
|---|---|:---:|:---:|:---:|
| [automation_project_id](variables.tf#L17) | Project id used for automation service accounts. | string
| ✓ | |
| [billing_account_id](variables.tf#L22) | Country billing account account. | string
| ✓ | |
| [name](variables.tf#L86) | Top folder name. | string
| ✓ | |
| [organization_id](variables.tf#L91) | Organization id in organizations/nnnnnn format. | string
| ✓ | |
| [root_node](variables.tf#L102) | Root node in folders/folder_id or organizations/org_id format. | string
| ✓ | |
| [short_name](variables.tf#L113) | Short name used as GCS bucket and service account prefixes, do not use capital letters or spaces. | string
| ✓ | |
| [environments](variables.tf#L27) | Unit environments short names. | map(string)
| | {…}
|
| [gcs_defaults](variables.tf#L36) | Defaults use for the state GCS buckets. | map(string)
| | {…}
|
| [iam](variables.tf#L45) | IAM bindings for the top-level folder in {ROLE => [MEMBERS]} format. | map(list(string))
| | {}
|
| [iam_billing_config](variables.tf#L51) | Grant billing user role to service accounts, defaults to granting on the billing account. | object({…})
| | {…}
|
| [iam_enviroment_roles](variables.tf#L63) | IAM roles granted to the environment service account on the environment sub-folder. | list(string)
| | […]
|
| [iam_xpn_config](variables.tf#L74) | Grant Shared VPC creation roles to service accounts, defaults to granting at folder level. | object({…})
| | {…}
|
| [prefix](variables.tf#L96) | Optional prefix used for GCS bucket names to ensure uniqueness. | string
| | null
|
| [service_account_keys](variables.tf#L107) | Generate and store service account keys in the state file. | bool
| | false
|
## Outputs
| name | description | sensitive |
|---|---|:---:|
| [env_folders](outputs.tf#L17) | Unit environments folders. | |
| [env_gcs_buckets](outputs.tf#L28) | Unit environments tfstate gcs buckets. | |
| [env_sa_keys](outputs.tf#L36) | Unit environments service account keys. | ✓ |
| [env_service_accounts](outputs.tf#L45) | Unit environments service accounts. | |
| [unit_folder](outputs.tf#L53) | Unit top level folder. | |