Переглянути джерело

Enables Role for Portal Lambda

To be tagged v1.23.11
Brad Poulton 4 роки тому
батько
коміт
a13c758ada
1 змінених файлів з 10 додано та 23 видалено
  1. 10 23
      base/vault-configuration/main.tf

+ 10 - 23
base/vault-configuration/main.tf

@@ -103,29 +103,16 @@ resource "vault_aws_auth_backend_role" "portal" {
   token_policies                  = ["portal"]
 }
 
-#TO BE IMPLEMETED
-# resource "vault_aws_auth_backend_role" "portal-data-sync-lambda-role" {
-#   backend                         = vault_auth_backend.aws.path
-#   role                            = "portal-data-sync-lambda-role"
-#   auth_type                       = "iam"
-#   bound_iam_principal_arns        = ["arn:${var.aws_partition}:iam::${var.aws_account_id}:role/portal-data-sync-lambda-role"]
-#   #inferred_aws_region             = "us-gov-east-1"
-#   token_ttl                       = 60
-#   token_max_ttl                   = 86400
-#   token_policies                  = ["portal"]
-# }
-
-#Legacy probably not used
-# resource "vault_aws_auth_backend_role" "clu" {
-#   backend                         = vault_auth_backend.aws.path
-#   role                            = "clu"
-#   auth_type                       = "iam"
-#   bound_iam_principal_arns        = ["arn:${var.aws_partition}:iam::{$var.aws_account_id}:role/clu-instance-role"]
-#   token_ttl                       = 60
-#   token_max_ttl                   = 86400
-#   token_policies                  = ["clu"]
-#   inferred_aws_region             = "us-gov-east-1"
-# }
+resource "vault_aws_auth_backend_role" "portal-data-sync-lambda-role" {
+  backend                         = vault_auth_backend.aws.path
+  role                            = "portal-data-sync-lambda-role"
+  auth_type                       = "iam"
+  bound_iam_principal_arns        = ["arn:${var.aws_partition}:iam::${var.aws_account_id}:role/portal-data-sync-lambda-role"]
+  #inferred_aws_region             = "us-gov-east-1"
+  token_ttl                       = 60
+  token_max_ttl                   = 86400
+  token_policies                  = ["portal"]
+}
 
 
 #----------------------------------------------------------------------------