main.tf

terraform {
  backend "remote" {
    hostname     = "app.terraform.io"
    organization = var.terraform_organization

    workspaces {
      name = "terraform-aws-workspace-setup"
    }
  }
}

provider "aws" {
  region = var.aws_region
}

provider "tfe" {
}

data "aws_organizations_organization" "master-payer" {}

locals {
  accounts_list = tolist(data.aws_organizations_organization.master-payer.accounts[*])
  accounts_map  = zipmap(local.accounts_list[*].id, local.accounts_list[*])
}

resource "tfe_workspace" "workspace" {
  for_each     = local.accounts_map
  organization = var.terraform_organization
  name         = replace(replace(lower(each.value.name), "/[^-_a-z0-9]+/", "-"), "/-{2,}/", "-")
}

resource "tfe_variable" "aws_id" {
  for_each     = local.accounts_map
  key          = "AWS_ACCOUNT_ID"
  value        = local.accounts_map[each.key].id
  category     = "terraform"
  workspace_id = "${tfe_workspace.workspace[each.key].id}"
}

resource "tfe_variable" "aws_root_email" {
  for_each     = local.accounts_map
  key          = "AWS_ROOT_EMAIL"
  value        = local.accounts_map[each.key].email
  category     = "terraform"
  workspace_id = "${tfe_workspace.workspace[each.key].id}"
}