Skip to content
This repository was archived by the owner on Feb 10, 2026. It is now read-only.

v1.131.0

Choose a tag to compare

@cloudpossebot cloudpossebot released this 23 Feb 01:13
15cdbd4
SSO upgrades and Support for Assume Role from Identity Users John C. Bland II (@johncblandii) (#567)

what

  • Upgraded aws-sso to use 0.7.1 modules
  • Updated account-map/modules/roles-to-principals to support assume role from SSO users in the identity account
  • Adjusted aws-sso/policy-Identity-role-RoleAccess.tf to use the identity account name vs the stage so it supports names like core-identity instead of just identity

why

  • aws-sso users could not assume role to plan/apply terraform locally
  • using core-identity as a name broke the aws-sso policy since account identity does not exist in full_account_map

references