diff --git a/main.tf b/main.tf index b174fa9..e1fe50b 100644 --- a/main.tf +++ b/main.tf @@ -123,7 +123,8 @@ module "rotation_lambda" { } } - recreate_missing_package = var.recreate_missing_package + recreate_missing_package = var.recreate_missing_package + role_permissions_boundary = var.role_permissions_boundary attach_policy_jsons = true policy_jsons = local.lambda_policies diff --git a/variables.tf b/variables.tf index 3291f33..b95fc82 100644 --- a/variables.tf +++ b/variables.tf @@ -112,4 +112,10 @@ variable "recreate_missing_package" { description = "Whether to recreate missing Lambda package if it is missing locally or not" type = bool default = true +} + +variable "role_permissions_boundary" { + description = "Optional permissions boundary for rotation lambda IAM role." + type = string + default = null } \ No newline at end of file