fix: s3 backend deprecated role_arn field (#151)

cloudposse · Jan 12, 2024 · 5ea10b3 · 5ea10b3
1 parent b8b7fb5
commit 5ea10b3
Showing 1 changed file with 11 additions and 6 deletions.
diff --git a/templates/terraform.tf.tpl b/templates/terraform.tf.tpl
@@ -2,14 +2,19 @@ terraform {
   required_version = ">= ${terraform_version}"
 
   backend "s3" {
-    region   = "${region}"
-    bucket   = "${bucket}"
-    key      = "${terraform_state_file}"
-    profile  = "${profile}"
-    role_arn = "${role_arn}"
-    encrypt  = "${encrypt}"
+    region  = "${region}"
+    bucket  = "${bucket}"
+    key     = "${terraform_state_file}"
+    profile = "${profile}"
+    encrypt = "${encrypt}"
+    %{~ if role_arn != "" ~}
 
+    assume_role {
+      role_arn = "${role_arn}"
+    }
+    %{~ endif ~}
     %{~ if dynamodb_table != "" ~}
+
     dynamodb_table = "${dynamodb_table}"
     %{~ endif ~}
   }