Fix role name for delegated grants in FAST bootstrap

Fixes issue behind #1621
2023-08-24 19:13:42 +02:00 · 2023-08-24 19:13:42 +02:00 · 1adfb9fb32
parent d36c53bbae
commit 1adfb9fb32
1 changed files with 1 additions and 2 deletions
--- a/fast/stages/0-bootstrap/organization.tf
+++ b/fast/stages/0-bootstrap/organization.tf
@ -88,9 +88,8 @@ module "organization" {
  )
  # delegated role grant for resource manager service account
  iam_bindings = {
-    sa_resman_delegated_iam = {
+    (module.organization.custom_role_id[var.custom_role_names.organization_iam_admin]) = {
      members = [module.automation-tf-resman-sa.iam_email]
-      role    = module.organization.custom_role_id[var.custom_role_names.organization_iam_admin]
      condition = {
        expression = format(
          "api.getAttribute('iam.googleapis.com/modifiedGrantsByRole', []).hasOnly([%s])",