From b403013ea96ee5feeef0af6d3aeeeb4932113ce7 Mon Sep 17 00:00:00 2001
From: Grzegorz Huber <ghuber@aarete.com>
Date: Tue, 11 Jun 2024 13:13:04 +0200
Subject: [PATCH] [DOC-537] add storage integration in terraform

---
 devops-pipeline/other-resources/main.tf         | 2 +-
 devops-pipeline/other-resources/variables.tf    | 5 ++++-
 devops-pipeline/other-resources/vars-dev.tfvars | 3 ++-
 devops-pipeline/other-resources/vars-uat.tfvars | 3 ++-
 4 files changed, 9 insertions(+), 4 deletions(-)

diff --git a/devops-pipeline/other-resources/main.tf b/devops-pipeline/other-resources/main.tf
index 1d1c994..668d449 100644
--- a/devops-pipeline/other-resources/main.tf
+++ b/devops-pipeline/other-resources/main.tf
@@ -149,7 +149,7 @@ resource "aws_iam_role" "snowflake_integration_role" {
         }
         Condition = {
           StringEquals = {
-              "sts:ExternalId" = "OQ11564_SFCRole=2_lNKzpyFn/e/xQgvGGpusVbEZA0A="
+              "sts:ExternalId" = var.storage_integration_external_id
           }
         }
       },
diff --git a/devops-pipeline/other-resources/variables.tf b/devops-pipeline/other-resources/variables.tf
index 97e452b..400c5a7 100644
--- a/devops-pipeline/other-resources/variables.tf
+++ b/devops-pipeline/other-resources/variables.tf
@@ -53,7 +53,10 @@ variable "mwaa_resources_s3_bucket" {
   }
 }
 
-
 variable "aws_account_id" {
   type = string
+}
+
+variable "storage_integration_external_id" {
+  type = string
 }
\ No newline at end of file
diff --git a/devops-pipeline/other-resources/vars-dev.tfvars b/devops-pipeline/other-resources/vars-dev.tfvars
index 9e8b1cd..920db87 100644
--- a/devops-pipeline/other-resources/vars-dev.tfvars
+++ b/devops-pipeline/other-resources/vars-dev.tfvars
@@ -1 +1,2 @@
-aws_account_id = 660131068782
\ No newline at end of file
+aws_account_id                  = 660131068782
+storage_integration_external_id = "OQ11564_SFCRole=2_lNKzpyFn/e/xQgvGGpusVbEZA0A="
\ No newline at end of file
diff --git a/devops-pipeline/other-resources/vars-uat.tfvars b/devops-pipeline/other-resources/vars-uat.tfvars
index 53f4392..c211281 100644
--- a/devops-pipeline/other-resources/vars-uat.tfvars
+++ b/devops-pipeline/other-resources/vars-uat.tfvars
@@ -1 +1,2 @@
-aws_account_id = 975049960860
\ No newline at end of file
+aws_account_id                  = 975049960860
+storage_integration_external_id = "OQ11564_SFCRole=2_L4NUsKqd3NIBmrATa1djc/T3ECQ="
\ No newline at end of file