diff --git a/aws-iam-role-crossacct/main.tf b/aws-iam-role-crossacct/main.tf index f76111e5..c5ebbc60 100644 --- a/aws-iam-role-crossacct/main.tf +++ b/aws-iam-role-crossacct/main.tf @@ -11,6 +11,7 @@ module "assume_role_policy" { source = "../aws-assume-role-policy" source_account_ids = var.source_account_ids saml_idp_arns = var.saml_idp_arns + source_role_arns = var.source_role_arns oidc = var.oidc env = var.env owner = var.owner diff --git a/aws-iam-role-crossacct/variables.tf b/aws-iam-role-crossacct/variables.tf index 18b737df..50828080 100755 --- a/aws-iam-role-crossacct/variables.tf +++ b/aws-iam-role-crossacct/variables.tf @@ -20,6 +20,11 @@ variable "saml_idp_arns" { description = "The AWS SAML IDP arns to establish a trust relationship. Ignored if empty or not provided." } +variable "source_role_arns" { + type = list(string) + description = "The source AWS roles to establish a trust relationship. Ignored if empty or not provided." +} + variable "oidc" { type = list(object( {