add the execution_role_arn to the CD user PassRole

briskt · briskt · commit a2cf7784d7f0 · 2025-10-27T15:30:06.000+08:00
diff --git a/main.tf b/main.tf
@@ -83,7 +83,10 @@ resource "aws_iam_user_policy" "cd" {
         Action = [
           "iam:PassRole",
         ]
-        Resource = module.ecsasg.ecsServiceRole_arn
+        Resource = [
+          module.ecsasg.ecsServiceRole_arn,
+          var.execution_role_arn,
+        ]
       },
     ]
   })

Original file line number	Diff line number	Diff line change
`@@ -83,7 +83,10 @@ resource "aws_iam_user_policy" "cd" {`
`83`	`83`	`Action = [`
`84`	`84`	`"iam:PassRole",`
`85`	`85`	`]`
`86`		`- Resource = module.ecsasg.ecsServiceRole_arn`
	`86`	`+ Resource = [`
	`87`	`+ module.ecsasg.ecsServiceRole_arn,`
	`88`	`+ var.execution_role_arn,`
	`89`	`+ ]`
`87`	`90`	`},`
`88`	`91`	`]`
`89`	`92`	`})`