Skip to content

Commit 44ebe21

Browse files
authored
Added variable overridable_team_permission_set_name_pattern to match the capability of aws-account-map (#45)
* update * Update policy-Identity-role-TeamAccess.tf
1 parent 8f0302c commit 44ebe21

File tree

2 files changed

+11
-3
lines changed

2 files changed

+11
-3
lines changed

src/policy-Identity-role-TeamAccess.tf

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -41,8 +41,9 @@ data "aws_iam_policy_document" "assume_aws_team" {
4141
module "role_map" {
4242
source = "../account-map/modules/roles-to-principals"
4343

44-
teams = var.aws_teams_accessible
45-
privileged = var.privileged
44+
teams = var.aws_teams_accessible
45+
privileged = var.privileged
46+
overridable_team_permission_set_name_pattern = var.overridable_team_permission_set_name_pattern
4647

4748
context = module.this.context
4849
}

src/variables.tf

Lines changed: 8 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -69,4 +69,11 @@ variable "account_map_component_name" {
6969
type = string
7070
description = "The name of the account-map component"
7171
default = "account-map"
72-
}
72+
}
73+
74+
variable "overridable_team_permission_set_name_pattern" {
75+
type = string
76+
description = "The pattern used to generate the AWS SSO PermissionSet name for each team"
77+
default = "Identity%sTeamAccess"
78+
}
79+

0 commit comments

Comments
 (0)