Skip to content

Commit

Permalink
Merge pull request #8531 from ministryofjustice/fix/plan-oidc-assume-…
Browse files Browse the repository at this point in the history
…role

Update assume role in OIDC plan role
  • Loading branch information
sukeshreddyg authored Nov 19, 2024
2 parents dbd669c + 31825e5 commit 12567e9
Showing 1 changed file with 2 additions and 1 deletion.
3 changes: 2 additions & 1 deletion terraform/modernisation-platform-account/iam.tf
Original file line number Diff line number Diff line change
Expand Up @@ -300,6 +300,7 @@ data "aws_iam_policy_document" "oidc_assume_plan_role_member" {
"arn:aws:iam::${local.environment_management.account_ids["core-vpc-preproduction"]}:role/ModernisationPlatformAccess",
"arn:aws:iam::${local.environment_management.account_ids["core-vpc-production"]}:role/ModernisationPlatformAccess",
"arn:aws:iam::${local.environment_management.account_ids["core-security-production"]}:role/ModernisationPlatformAccess",
"arn:aws:iam::${local.environment_management.account_ids["core-shared-services-production"]}:role/ModernisationPlatformAccess",
"arn:aws:iam::${local.environment_management.account_ids["testing-test"]}:role/ModernisationPlatformAccess",
"arn:aws:iam::${local.environment_management.aws_organizations_root_account_id}:role/ModernisationPlatformSSOAdministrator"
]
Expand Down Expand Up @@ -367,4 +368,4 @@ resource "aws_iam_policy" "sso_customer_managed_policy_engineer" {
path = "/"
description = "Restricted policy for use for the testing of customer managed SSO policies"
policy = data.aws_iam_policy_document.sso_customer_managed_policy_engineer.json
}
}

0 comments on commit 12567e9

Please sign in to comment.