starred/warmbly
1
0
Fork 0
mirror of https://github.com/warmbly/warmbly.git synced 2026-11-04 08:15:38 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat: allow the AWS deployment role to pass the backend and consumer task roles to ECS

Browse Source
This commit is contained in:
Matthew Meszaros
2026-10-22 12:14:15 +02:00
parent 8cd6e1e0fa
commit f31334bd7a
1 changed files with 4 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
deploy/terraform/aws/runtime/ci.tf
+4 -2
View File
@@ -67,8 +67,10 @@ data "aws_iam_policy_document" "github_deploy" {
}
}
statement {
actions = ["iam:PassRole"]
resources = [aws_iam_role.migration_execution.arn]
actions = ["iam:PassRole"]
resources = concat([aws_iam_role.migration_execution.arn], flatten([
for name in ["backend", "consumer"] : [aws_iam_role.execution[name].arn, aws_iam_role.application[name].arn]
]))
condition {
test = "StringEquals"
variable = "iam:PassedToService"