Merge pull request #4 from mbenson/permissions_boundary

support role_permissions_boundary in rotation lambda
JCapriotti · Sep 18, 2022 · 4287814 · 4287814
2 parents e9357f2 + 6d1580a
commit 4287814
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 1 deletion.
diff --git a/main.tf b/main.tf
@@ -123,7 +123,8 @@ module "rotation_lambda" {
     }
   }
 
-  recreate_missing_package = var.recreate_missing_package
+  recreate_missing_package  = var.recreate_missing_package
+  role_permissions_boundary = var.role_permissions_boundary
 
   attach_policy_jsons    = true
   policy_jsons           = local.lambda_policies

diff --git a/variables.tf b/variables.tf
@@ -112,4 +112,10 @@ variable "recreate_missing_package" {
   description = "Whether to recreate missing Lambda package if it is missing locally or not"
   type        = bool
   default     = true
+}
+
+variable "role_permissions_boundary" {
+  description = "Optional permissions boundary for rotation lambda IAM role."
+  type        = string
+  default     = null
 }