update the ecs execution role in passrole policy (#2143)

Tian-2017 · web-flow · commit 88fb7d2e154a · 2025-02-25T17:07:17.000Z
diff --git a/terraform/modules/department/50-aws-iam-policies.tf b/terraform/modules/department/50-aws-iam-policies.tf
@@ -933,8 +933,8 @@ data "aws_iam_policy_document" "department_ecs_passrole" {
       "iam:PassRole"
     ]
     resources = [
-      aws_iam_role.department_ecs_role.arn, # Defined in 50-aws-iam-roles.tf
-      "arn:aws:iam::${data.aws_caller_identity.current.account_id}:role/${replace(local.department_identifier, "-", "_")}-ecs-execution-role", # Defined in ecs repo.
+      aws_iam_role.department_ecs_role.arn,                                                                                 # Defined in 50-aws-iam-roles.tf
+      "arn:aws:iam::${data.aws_caller_identity.current.account_id}:role/${local.department_identifier}-ecs-execution-role", # Defined in ecs repo.
     ]
     condition {
       test     = "StringEquals"

Original file line number	Diff line number	Diff line change
`@@ -933,8 +933,8 @@ data "aws_iam_policy_document" "department_ecs_passrole" {`
`933`	`933`	`"iam:PassRole"`
`934`	`934`	`]`
`935`	`935`	`resources = [`
`936`		`- aws_iam_role.department_ecs_role.arn, # Defined in 50-aws-iam-roles.tf`
`937`		`- "arn:aws:iam::${data.aws_caller_identity.current.account_id}:role/${replace(local.department_identifier, "-", "_")}-ecs-execution-role", # Defined in ecs repo.`
	`936`	`+ aws_iam_role.department_ecs_role.arn, # Defined in 50-aws-iam-roles.tf`
	`937`	`+ "arn:aws:iam::${data.aws_caller_identity.current.account_id}:role/${local.department_identifier}-ecs-execution-role", # Defined in ecs repo.`
`938`	`938`	`]`
`939`	`939`	`condition {`
`940`	`940`	`test = "StringEquals"`