resource aws_iam_role "mdr_terraformer" { name = "mdr_terraformer" path = "/user/" assume_role_policy = data.aws_iam_policy_document.non_saml_assume_role_policy.json } resource aws_iam_role_policy_attachment "mdr_terraformer-mdr_terraformer" { role = aws_iam_role.mdr_terraformer.name policy_arn = module.standard_iam_policies.arns["mdr_terraformer"] }