iam-roles-finance.tf

resource "aws_iam_role" "NetsellsSecurityFinance" {
  count = var.role_finance ? 1 : 0
  name  = "Finance"

  assume_role_policy = data.aws_iam_policy_document.saml_trust_policy.json

  max_session_duration = "28800"
}

resource "aws_iam_role_policy_attachment" "NetsellsSecurityFinance-Billing" {
  count      = var.role_finance ? 1 : 0
  role       = aws_iam_role.NetsellsSecurityFinance[0].name
  policy_arn = "arn:aws:iam::aws:policy/job-function/Billing"
}