Adding SSO role for notification admins (#400)

* Adding SSO role for notification admins * Adding a wildcard character
cds-snc · Jul 16, 2024 · a934391 · a934391
1 parent cf2fa46
commit a934391
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/terraform/notification.canada.ca-role.tf b/terraform/notification.canada.ca-role.tf
@@ -8,7 +8,10 @@ resource "aws_iam_role" "notify_prod_dns_manager" {
       {
         Effect = "Allow",
         Principal = {
-          AWS = "arn:aws:iam::296255494825:role/notification-terraform-apply"
+          AWS = [
+            "arn:aws:iam::296255494825:role/notification-terraform-apply",
+            "arn:aws:iam::296255494825:role/aws-reserved/sso.amazonaws.com/ca-central-1/AWSReservedSSO_AWSAdministratorAccess_*"
+          ]
         },
         Action = "sts:AssumeRole"
       }