terraform-aws-modules / terraform-aws-iam

Terraform module to create AWS IAM resources 🇺🇦
https://registry.terraform.io/modules/terraform-aws-modules/iam/aws
Apache License 2.0
787 stars 997 forks source link

feat: Add support for trusted roles in iam-assumable-role-with-oidc #512

Closed aacuadras closed 2 weeks ago

aacuadras commented 1 month ago

Description

Extended functionality of iam-assumable-role-with-oidc to also allow assuming the role by trusted AWS principals

Motivation and Context

In some cases, it's needed to extend the trust policy of a role that gets assumed with OIDC to also be assumed by trusted principals in AWS. In my case, I need to allow some principals to assume the target roles locally without using OIDC, while maintaining the ability for a federated assumed role and without duplicating the role with different trust policies.

Breaking Changes

None

How Has This Been Tested?

github-actions[bot] commented 3 weeks ago

This PR has been automatically marked as stale because it has been open 30 days with no activity. Remove stale label or comment or this PR will be closed in 10 days

github-actions[bot] commented 2 weeks ago

This PR was automatically closed because of stale in 10 days