fix: Add mission permission to allow ECS Fargate container exec (#440)

* fix: Add mission permission to allow ECS Fargate container exec * Provided a default value for an optional argument
chanzuckerberg · Nov 16, 2022 · 24b3036 · 24b3036
1 parent b435483
commit 24b3036
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 1 deletion.
diff --git a/aws-assume-role-policy/variables.tf b/aws-assume-role-policy/variables.tf
@@ -25,6 +25,7 @@ variable "source_account_ids" {
 
 variable "source_role_arns" {
   type        = list(string)
+  default     = []
   description = "The source AWS roles to establish a trust relationship. Ignored if empty or not provided."
 }
 
@@ -55,4 +56,4 @@ variable "ci_manager" {
   ))
   default     = []
   description = "If this role will manage CI profiles, include the external ID value (name of the service) and its account ID"
-}
+}
diff --git a/aws-iam-role-poweruser/main.tf b/aws-iam-role-poweruser/main.tf
@@ -95,6 +95,7 @@ data "aws_iam_policy_document" "misc" {
       "iam:UpdateAssumeRolePolicy",
       "iam:UpdateRole",
       "iam:UpdateRoleDescription",
+      "iam:SimulatePrincipalPolicy"
     ]
 
     resources = ["*"]