update IAP impersonator roles

jamalc · jamalc · commit 67b95239ab48 · 2025-03-27T20:16:50.000Z
diff --git a/terraform/modules/iam/variables.tf b/terraform/modules/iam/variables.tf
@@ -50,6 +50,6 @@ variable "iap_impersonation_sa_roles" {
   type        = list(string)
   description = "List of IAM roles to grant to the IAP Impersonation service account."
   default = [
-    "roles/iam.serviceAccountTokenCreator",
+    "roles/iap.httpsResourceAccessor",
   ]
 }

Original file line number	Diff line number	Diff line change
`@@ -50,6 +50,6 @@ variable "iap_impersonation_sa_roles" {`
`50`	`50`	`type = list(string)`
`51`	`51`	`description = "List of IAM roles to grant to the IAP Impersonation service account."`
`52`	`52`	`default = [`
`53`		`- "roles/iam.serviceAccountTokenCreator",`
	`53`	`+ "roles/iap.httpsResourceAccessor",`
`54`	`54`	`]`
`55`	`55`	`}`