Skip to content

Commit 48cab13

Browse files
authored
allow passrole on task role too (#1992)
* allow passrole on task role too * match with dataplatform-stg-ecs-parking * remove the environment variable since the identifier_prefix includes
1 parent f452f7d commit 48cab13

File tree

1 file changed

+3
-1
lines changed

1 file changed

+3
-1
lines changed

terraform/modules/department/50-aws-iam-policies.tf

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -911,7 +911,9 @@ data "aws_iam_policy_document" "airflow_base_policy" {
911911
"arn:aws:iam::${data.aws_caller_identity.current.account_id}:role/dap-ecs-execution-role",
912912
"arn:aws:iam::${data.aws_caller_identity.current.account_id}:role/dap-ecs-task-role",
913913
"arn:aws:iam::${data.aws_caller_identity.current.account_id}:role/parking-ecs-execution-role",
914-
"arn:aws:iam::${data.aws_caller_identity.current.account_id}:role/housing-ecs-execution-role"
914+
"arn:aws:iam::${data.aws_caller_identity.current.account_id}:role/${var.identifier_prefix}-ecs-parking",
915+
"arn:aws:iam::${data.aws_caller_identity.current.account_id}:role/housing-ecs-execution-role",
916+
"arn:aws:iam::${data.aws_caller_identity.current.account_id}:role/${var.identifier_prefix}-ecs-housing",
915917
]
916918
condition {
917919
test = "StringEquals"

0 commit comments

Comments
 (0)