Allow assumption of the Users account provision role

This is necessary due to the changes in cisagov/cool-assessment-terraform#254.
cisagov · Oct 18, 2024 · dd72c01 · dd72c01
1 parent 371d552
commit dd72c01
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/locals.tf b/locals.tf
@@ -58,6 +58,7 @@ locals {
     data.terraform_remote_state.sharedservices-production.outputs.provisionaccount_role.arn,
     data.terraform_remote_state.sharedservices-staging.outputs.provisionaccount_role.arn,
     data.terraform_remote_state.terraform.outputs.provisionaccount_role.arn,
+    data.terraform_remote_state.users.outputs.provisionaccount_role.arn,
   ]
   required_non_assessment_roles_backend = concat(local.required_non_assessment_roles_no_backend, [
     data.terraform_remote_state.terraform.outputs.access_terraform_backend_role.arn,