SSPROD-36960: Update the customer role name based on subscription (#28)

* Update * SSPROD-36960: Use only the subscription id
sysdiglabs · Feb 2, 2024 · d58be63 · d58be63
1 parent 383d139
commit d58be63
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/modules/services/service-principal/main.tf b/modules/services/service-principal/main.tf
@@ -45,12 +45,12 @@ resource "azurerm_role_assignment" "sysdig_reader" {
 # Create a Custom role for collecting authsettings
 #---------------------------------------------------------------------------------------------
 resource "azurerm_role_definition" "sysdig_cspm_role" {
- name = "sysdig-cspm-role"
+ name = "sysdig-cspm-role-${var.subscription_id}"
  scope = data.azurerm_subscription.primary.id
  description = "Custom role for collecting Authsettings for CIS Benchmark"
 
  permissions {
- actions  = [
+ actions = [
  "Microsoft.Web/sites/config/list/action"
  ]
  not_actions = []