[SYM-4806] Add an optional iam_role_name input

[llam15]

Summary

• Adds an optional iam_role_name input. If one is specified, then the generated IAM Policy will be attached to that AWS IAM Role

Testing

Tested with the following main.tf

terraform {
  required_version = ">= 1.0.7"
  required_providers {
    sym = {
      source  = "symopsio/sym"
      version = ">= 2.0"
    }
    aws = {
      source  = "hashicorp/aws"
      version = ">= 3.0"
    }
  }
}

locals {
  environment = "leslie"
}

provider "aws" {
  region = "us-east-1"
}

provider "sym" {
  org = "sym"
}

module "runtime_connector" {
  source  = "[email protected]:symopsio/terraform-aws-runtime-connector.git?ref=leslie/sym-4763-create-runtime-connector-v2x"

  environment = local.environment

  sym_account_id = "906191524257"
}

module "kinesis_data_stream" {
  source = "../terraform-aws-kinesis-data-stream-addon"

  environment = local.environment
  stream_arns = ["arn:aws:kinesis:*:111122223333:stream/my-stream"]
  iam_role_name = module.runtime_connector.sym_runtime_connector_role.name
}

Tested with both the iam_role_name specified and unspecified.
Verified that the policy is attached if iam_role_name is specified, otherwise only the policy is declared.

[llam15]

Current dependencies on/for this PR:

• main
  • PR [SYM-4806] Add an optional iam_role_name input #1 👈

This comment was auto-generated by Graphite.

[linear]

SYM-4806 Update add-ons to accept a runtime_role_name input

The add-ons currently don't attach the policies they generate to a role.

For each add-on module, add an optional input variable runtime_role_name. if it's passed in, then the policy will be attached to the role