Skip to content
This repository was archived by the owner on Feb 10, 2026. It is now read-only.

v1.72.0

Choose a tag to compare

View all tags
@cloudpossebot cloudpossebot released this 21 Sep 18:40
1.72.0
9a086ff
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Verified
Learn about vigilant mode.
Allow IAM users to assume team roles via an optional flag Joe Niland (@joe-niland) (#495)

what

  • Adds a flag var.deny_all_iam_users which, when disabled, will allow IAM users to assume team roles
  • Specific users can still be denied via var.denied_principal_arns

why

  • The existing functionality denies all IAM users from assuming team roles
  • In legacy/specific situations it would be good to allow this

references

  • None

(PR submitted on behalf of Matt Gowie (@Gowiem))

Contributors

Gowiem and joe-niland
Assets 2
Loading