Merge pull request #720 from MikelAlejoBR/RHCLOUD-35160-feature-cloud…

…igrade-external-id RHCLOUD-35160 | feature: support "external ID" field for Cloud Meter roles
RedHatInsights · Dec 5, 2024 · 60e1702 · 60e1702
2 parents 91fd76b + 0570e76
commit 60e1702
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/dao/seeds/superkey_metadata.yml b/dao/seeds/superkey_metadata.yml
@@ -131,12 +131,17 @@
               "AWS": "arn:aws:iam::ACCOUNT:root"
             },
             "Action": "sts:AssumeRole",
-            "Condition": {}
+            "Condition": {
+              "StringEquals": {
+                "sts:ExternalID": "EXTERNAL_ID"
+              }
+            }
           }
         ]
       }
     substitutions:
       ACCOUNT: get_account
+      EXTERNAL_ID: generate_external_id
   - step: 3
     name: bind_role
     payload: {}