module "iam_roles" { source = "../../../../modules/iam/child_account_roles/0.1" # no account_alias on purpose assume_role_trusted_arns = [ "arn:aws:iam::471284459109:role/user/mdr_engineer_readonly", ] }