fix example

aws-ia · May 23, 2024 · 4a55c75 · 4a55c75
1 parent 2051fb2
commit 4a55c75
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 4 deletions.
diff --git a/.header.md b/.header.md
@@ -86,10 +86,13 @@ module "aws-iam-identity-center" {
         "arn:aws:iam::aws:policy/AmazonS3FullAccess",
       ]
       inline_policy        = data.aws_iam_policy_document.CustomPermissionInlinePolicy.json
-      permissions_boundary = {
-        // either managed_policy_arn or customer_managed_policy_reference
 
+      // Only either managed_policy_arn or customer_managed_policy_reference can be specified.
+      // Before using customer_managed_policy_reference, first deploy the policy to the account.
+      // Don't in-place managed_policy_arn to/from customer_managed_policy_reference, delete it once.
+      permissions_boundary = {
         // managed_policy_arn = "arn:aws:iam::aws:policy/PowerUserAccess"
+
         customer_managed_policy_reference = {
           name = "ExamplePermissionsBoundaryPolicy"
           // path = "/"

diff --git a/README.md b/README.md
@@ -87,10 +87,13 @@ module "aws-iam-identity-center" {
         "arn:aws:iam::aws:policy/AmazonS3FullAccess",
       ]
       inline_policy        = data.aws_iam_policy_document.CustomPermissionInlinePolicy.json
-      permissions_boundary = {
-        // either managed_policy_arn or customer_managed_policy_reference
 
+      // Only either managed_policy_arn or customer_managed_policy_reference can be specified.
+      // Before using customer_managed_policy_reference, first deploy the policy to the account.
+      // Don't in-place managed_policy_arn to/from customer_managed_policy_reference, delete it once.
+      permissions_boundary = {
         // managed_policy_arn = "arn:aws:iam::aws:policy/PowerUserAccess"
+
         customer_managed_policy_reference = {
           name = "ExamplePermissionsBoundaryPolicy"
           // path = "/"