Skip to content

Commit decbe90

Browse files
committed
Last fix
1 parent 50231d8 commit decbe90

File tree

1 file changed

+2
-4
lines changed
  • modules/vm-workload-scanning

1 file changed

+2
-4
lines changed

modules/vm-workload-scanning/main.tf

Lines changed: 2 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -66,10 +66,8 @@ resource "google_iam_workload_identity_pool_provider" "agentless" {
6666
attribute_condition = "attribute.aws_role==\"arn:aws:sts::${data.sysdig_secure_trusted_cloud_identity.trusted_identity.aws_account_id}:assumed-role/${data.sysdig_secure_trusted_cloud_identity.trusted_identity.aws_role_name}/${data.sysdig_secure_tenant_external_id.external_id.external_id}\""
6767

6868
attribute_mapping = {
69-
"google.subject" = "assertion.arn"
70-
"attribute.aws_account" = "assertion.account"
71-
"attribute.role" = "assertion.arn.extract(\"/assumed-role/{role}/\")"
72-
"attribute.session" = "assertion.arn.extract(\"/assumed-role/{role_and_session}/\").extract(\"/{session}\")"
69+
"google.subject" = "assertion.arn",
70+
"attribute.aws_role" = "assertion.arn"
7371
}
7472

7573
aws {

0 commit comments

Comments
 (0)