Merge pull request #1623 from GoogleCloudPlatform/jccb/fix-fast-bootstrap-iam

Fix role name for delegated grants in FAST bootstrap
2023-08-25 08:43:20 +02:00 · 2023-08-25 08:43:20 +02:00 · e4a33b56e0
parent 5b43ed270d 44a65f79e5
commit e4a33b56e0
1 changed files with 1 additions and 2 deletions
--- a/fast/stages/0-bootstrap/organization.tf
+++ b/fast/stages/0-bootstrap/organization.tf
@ -88,9 +88,8 @@ module "organization" {
  )
  # delegated role grant for resource manager service account
  iam_bindings = {
-    sa_resman_delegated_iam = {
+    (module.organization.custom_role_id[var.custom_role_names.organization_iam_admin]) = {
      members = [module.automation-tf-resman-sa.iam_email]
-      role    = module.organization.custom_role_id[var.custom_role_names.organization_iam_admin]
      condition = {
        expression = format(
          "api.getAttribute('iam.googleapis.com/modifiedGrantsByRole', []).hasOnly([%s])",