diff --git a/devops-pipeline/other-resources/main.tf b/devops-pipeline/other-resources/main.tf index 1d1c994..668d449 100644 --- a/devops-pipeline/other-resources/main.tf +++ b/devops-pipeline/other-resources/main.tf @@ -149,7 +149,7 @@ resource "aws_iam_role" "snowflake_integration_role" { } Condition = { StringEquals = { - "sts:ExternalId" = "OQ11564_SFCRole=2_lNKzpyFn/e/xQgvGGpusVbEZA0A=" + "sts:ExternalId" = var.storage_integration_external_id } } }, diff --git a/devops-pipeline/other-resources/variables.tf b/devops-pipeline/other-resources/variables.tf index 97e452b..400c5a7 100644 --- a/devops-pipeline/other-resources/variables.tf +++ b/devops-pipeline/other-resources/variables.tf @@ -53,7 +53,10 @@ variable "mwaa_resources_s3_bucket" { } } - variable "aws_account_id" { type = string +} + +variable "storage_integration_external_id" { + type = string } \ No newline at end of file diff --git a/devops-pipeline/other-resources/vars-dev.tfvars b/devops-pipeline/other-resources/vars-dev.tfvars index 9e8b1cd..920db87 100644 --- a/devops-pipeline/other-resources/vars-dev.tfvars +++ b/devops-pipeline/other-resources/vars-dev.tfvars @@ -1 +1,2 @@ -aws_account_id = 660131068782 \ No newline at end of file +aws_account_id = 660131068782 +storage_integration_external_id = "OQ11564_SFCRole=2_lNKzpyFn/e/xQgvGGpusVbEZA0A=" \ No newline at end of file diff --git a/devops-pipeline/other-resources/vars-uat.tfvars b/devops-pipeline/other-resources/vars-uat.tfvars index 53f4392..c211281 100644 --- a/devops-pipeline/other-resources/vars-uat.tfvars +++ b/devops-pipeline/other-resources/vars-uat.tfvars @@ -1 +1,2 @@ -aws_account_id = 975049960860 \ No newline at end of file +aws_account_id = 975049960860 +storage_integration_external_id = "OQ11564_SFCRole=2_L4NUsKqd3NIBmrATa1djc/T3ECQ=" \ No newline at end of file