We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent da979e5 commit b2589ceCopy full SHA for b2589ce
asset-account/terraform/stack-set/examples/self-managed/admin.tf
@@ -38,17 +38,17 @@ resource "aws_iam_role" "admin" {
38
"Principal" : {
39
"Service" : "cloudformation.amazonaws.com"
40
},
41
- "Action" : "sts:AssumeRole"
+ "Action" : "sts:AssumeRole",
42
+ "Condition" : {
43
+ "StringEquals" : {
44
+ "aws:SourceAccount" : local.admin_account_id
45
+ },
46
+ "StringLike" : {
47
+ "aws:SourceArn" : "arn:aws:cloudformation:*:${local.admin_account_id}:stackset/*"
48
+ }
49
50
}
51
],
- "Condition" : {
- "StringEquals" : {
- "aws:SourceAccount" : local.admin_account_id
- },
- "StringLike" : {
- "aws:SourceArn" : "arn:aws:cloudformation:*:${local.admin_account_id}:stackset/*"
- }
52
53
)
54
0 commit comments