fixing source role arns

chanzuckerberg · Sep 19, 2022 · 341cfe1 · 341cfe1
1 parent a96bc38
commit 341cfe1
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 0 deletions.
diff --git a/aws-iam-role-crossacct/main.tf b/aws-iam-role-crossacct/main.tf
@@ -11,6 +11,7 @@ module "assume_role_policy" {
   source             = "../aws-assume-role-policy"
   source_account_ids = var.source_account_ids
   saml_idp_arns      = var.saml_idp_arns
+  source_role_arns   = var.source_role_arns
   oidc               = var.oidc
   env                = var.env
   owner              = var.owner

diff --git a/aws-iam-role-crossacct/variables.tf b/aws-iam-role-crossacct/variables.tf
@@ -20,6 +20,11 @@ variable "saml_idp_arns" {
   description = "The AWS SAML IDP arns to establish a trust relationship. Ignored if empty or not provided."
 }
 
+variable "source_role_arns" {
+  type        = list(string)
+  description = "The source AWS roles to establish a trust relationship. Ignored if empty or not provided."
+}
+
 variable "oidc" {
   type = list(object(
     {