Merge pull request #77 from NHSDigital/feature/CCM-8813_grafana

aidenvaines-cgi · web-flow · commit 9a11b8a7d05b · 2025-02-27T11:31:46.000Z
CCM-8742: Update IAM role component for grafana access role trust pol
diff --git a/infrastructure/terraform/components/dnsroot/iam_role_grafana_access.tf b/infrastructure/terraform/components/dnsroot/iam_role_grafana_access.tf
@@ -9,7 +9,7 @@ data "aws_iam_policy_document" "observability_grafana_role_assume_role_policy" {
     effect  = "Allow"
     principals {
       type        = "AWS"
-      identifiers = ["arn:aws:iam::${var.observability_account_id}:role/${local.csi}-grafana-workspace-role"]
+      identifiers = [replace("arn:aws:iam::${var.observability_account_id}:role/${local.csi}-grafana-workspace-role", var.component, "acct")]
     }
   }
 }

Original file line number	Diff line number	Diff line change
`@@ -9,7 +9,7 @@ data "aws_iam_policy_document" "observability_grafana_role_assume_role_policy" {`
`9`	`9`	`effect = "Allow"`
`10`	`10`	`principals {`
`11`	`11`	`type = "AWS"`
`12`		`- identifiers = ["arn:aws:iam::${var.observability_account_id}:role/${local.csi}-grafana-workspace-role"]`
	`12`	`+ identifiers = [replace("arn:aws:iam::${var.observability_account_id}:role/${local.csi}-grafana-workspace-role", var.component, "acct")]`
`13`	`13`	`}`
`14`	`14`	`}`
`15`	`15`	`}`