Add role_requires_session_name

terraform-aws-modules · Aug 16, 2024 · 8923059 · 8923059
1 parent 177f0ee
commit 8923059
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/wrappers/iam-assumable-roles/main.tf b/wrappers/iam-assumable-roles/main.tf
@@ -28,6 +28,8 @@ module "wrapper" {
   readonly_role_policy_arns               = try(each.value.readonly_role_policy_arns, var.defaults.readonly_role_policy_arns, ["arn:aws:iam::aws:policy/ReadOnlyAccess"])
   readonly_role_requires_mfa              = try(each.value.readonly_role_requires_mfa, var.defaults.readonly_role_requires_mfa, true)
   readonly_role_tags                      = try(each.value.readonly_role_tags, var.defaults.readonly_role_tags, {})
+  role_requires_session_name              = try(each.value.role_requires_session_name, var.defaults.role_requires_session_name, false)
+  role_session_name                       = try(each.value.role_session_name, var.defaults.role_session_name, ["$${aws:username}"])
   trusted_role_actions                    = try(each.value.trusted_role_actions, var.defaults.trusted_role_actions, ["sts:AssumeRole", "sts:TagSession"])
   trusted_role_arns                       = try(each.value.trusted_role_arns, var.defaults.trusted_role_arns, [])
   trusted_role_services                   = try(each.value.trusted_role_services, var.defaults.trusted_role_services, [])