Skip to content

Commit 8f11c52

Browse files
committed
feat: Add permissions_boundary to fargate execution iam role
1 parent e4520d2 commit 8f11c52

File tree

2 files changed

+7
-5
lines changed

2 files changed

+7
-5
lines changed

fargate.tf

+1
Original file line numberDiff line numberDiff line change
@@ -5,6 +5,7 @@ module "fargate" {
55
create_fargate_pod_execution_role = var.create_fargate_pod_execution_role
66
fargate_pod_execution_role_name = var.fargate_pod_execution_role_name
77
fargate_profiles = var.fargate_profiles
8+
permissions_boundary = var.permissions_boundary
89
iam_path = var.iam_path
910
iam_policy_arn_prefix = local.policy_arn_prefix
1011
subnets = var.subnets

modules/fargate/fargate.tf

+6-5
Original file line numberDiff line numberDiff line change
@@ -1,9 +1,10 @@
11
resource "aws_iam_role" "eks_fargate_pod" {
2-
count = local.create_eks && var.create_fargate_pod_execution_role ? 1 : 0
3-
name_prefix = format("%s-fargate", var.cluster_name)
4-
assume_role_policy = data.aws_iam_policy_document.eks_fargate_pod_assume_role[0].json
5-
tags = var.tags
6-
path = var.iam_path
2+
count = local.create_eks && var.create_fargate_pod_execution_role ? 1 : 0
3+
name_prefix = format("%s-fargate", var.cluster_name)
4+
assume_role_policy = data.aws_iam_policy_document.eks_fargate_pod_assume_role[0].json
5+
permissions_boundary = var.permissions_boundary
6+
tags = var.tags
7+
path = var.iam_path
78
}
89

910
resource "aws_iam_role_policy_attachment" "eks_fargate_pod" {

0 commit comments

Comments
 (0)