File tree Expand file tree Collapse file tree 2 files changed +4
-4
lines changed
examples/assign-users-and-groups-to-account
modules/account_users_and_groups_assignments Expand file tree Collapse file tree 2 files changed +4
-4
lines changed Original file line number Diff line number Diff line change 11variable "account_assignments" {
22 description = << EOF
33 A list of objects representing permission assignments for AWS SSO. Each object contains the following attributes:
4- - account_id : The AWS account ID where the permissions will be applied.
4+ - account_name : The AWS account where the permissions will be applied.
55 - permission_sets: List of permission-set to be assigned to the specified principals.
66 - principal_names: An identifier for an object in AWS SSO, such as the names of groups or users .
77 -principal_type: The entity type for which the assignment will be created. Valid values: USER, GROUP.
88 EOF
99 type = list (object ({
10- account_id = string
10+ account_name = string
1111 permission_sets = list (string )
1212 principal_names = list (string )
1313 principal_type = string
1414 }))
1515 default = [
1616 {
17- account_id = " 121212121212 "
17+ account_name = " staging "
1818 permission_sets = [" StagingDev" ]
1919 principal_names = [" Staging_Dev" ]
2020 principal_type = " GROUP"
Original file line number Diff line number Diff line change @@ -10,7 +10,7 @@ locals {
1010 for acc_assignment in var . account_assignments : [
1111 for ps_name in acc_assignment . permission_sets : [
1212 for pr_name in acc_assignment . principal_names : {
13- acc_id = account_map [acc_assignment . account_name ]
13+ acc_id = local . account_map [acc_assignment . account_name ]
1414 principal_name = pr_name
1515 ps_name = ps_name
1616 principal_type = acc_assignment . principal_type
You can’t perform that action at this time.
0 commit comments