fix: don't allow dashes in sids

chanzuckerberg · May 1, 2024 · 7959ea0 · 7959ea0
1 parent cebf994
commit 7959ea0
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/aws-iam-role-github-action/main.tf b/aws-iam-role-github-action/main.tf
@@ -24,7 +24,7 @@ data "aws_iam_policy_document" "assume_role" {
     for_each = var.authorized_github_repos
 
     content {
-      sid = "AllowGithubActionsToAssumeRole${statement.key}"
+      sid = replace("Allow${statement.key}ToAssumeRole", "-", "")
       principals {
         type        = "Federated"
         identifiers = [local.idp_arn]