Skip to content

Commit b2589ce

Browse files
committed
Fix
1 parent da979e5 commit b2589ce

File tree

1 file changed

+9
-9
lines changed
  • asset-account/terraform/stack-set/examples/self-managed

1 file changed

+9
-9
lines changed

asset-account/terraform/stack-set/examples/self-managed/admin.tf

Lines changed: 9 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -38,17 +38,17 @@ resource "aws_iam_role" "admin" {
3838
"Principal" : {
3939
"Service" : "cloudformation.amazonaws.com"
4040
},
41-
"Action" : "sts:AssumeRole"
41+
"Action" : "sts:AssumeRole",
42+
"Condition" : {
43+
"StringEquals" : {
44+
"aws:SourceAccount" : local.admin_account_id
45+
},
46+
"StringLike" : {
47+
"aws:SourceArn" : "arn:aws:cloudformation:*:${local.admin_account_id}:stackset/*"
48+
}
49+
}
4250
}
4351
],
44-
"Condition" : {
45-
"StringEquals" : {
46-
"aws:SourceAccount" : local.admin_account_id
47-
},
48-
"StringLike" : {
49-
"aws:SourceArn" : "arn:aws:cloudformation:*:${local.admin_account_id}:stackset/*"
50-
}
51-
}
5252
}
5353
)
5454
}

0 commit comments

Comments
 (0)