fix/allow assume the cross department glue metadata role in the ecs (#2629)

Tian-2017 · web-flow · commit afa17ce3f0f7 · 2026-01-16T11:51:38.000Z
diff --git a/terraform/core/49-aws-ecs-iam.tf b/terraform/core/49-aws-ecs-iam.tf
@@ -14,7 +14,7 @@ resource "aws_iam_role" "cross_department_glue_metadata_role" {
       {
         Effect = "Allow"
         Principal = {
-          AWS = aws_iam_role.mwaa_role.arn
+          Service = "ecs-tasks.amazonaws.com"
         }
         Action = "sts:AssumeRole"
       }

Original file line number	Diff line number	Diff line change
`@@ -14,7 +14,7 @@ resource "aws_iam_role" "cross_department_glue_metadata_role" {`
`14`	`14`	`{`
`15`	`15`	`Effect = "Allow"`
`16`	`16`	`Principal = {`
`17`		`- AWS = aws_iam_role.mwaa_role.arn`
	`17`	`+ Service = "ecs-tasks.amazonaws.com"`
`18`	`18`	`}`
`19`	`19`	`Action = "sts:AssumeRole"`
`20`	`20`	`}`