@@ -46,13 +46,13 @@ resource "aws_ssoadmin_permission_set" "permission_set" {
4646
4747resource "aws_ssoadmin_managed_policy_attachment" "attachment" {
4848 for_each = local. enable_sso ? merge ([
49- for permission_set_name , permission_set in local . sso_permission_sets : {
50- for managed_policy_name in permission_set [" managed_policies" ] : " ${ permission_set_name } _${ managed_policy_name } " => {
51- permission_set_name = permission_set_name
52- managed_policy_name = managed_policy_name
53- }
49+ for permission_set_name , permission_set in local . sso_permission_sets : {
50+ for managed_policy_name in permission_set [" managed_policies" ] : " ${ permission_set_name } _${ managed_policy_name } " => {
51+ permission_set_name = permission_set_name
52+ managed_policy_name = managed_policy_name
5453 }
55- ]... ) : {}
54+ }
55+ ]... ) : {}
5656
5757 instance_arn = tolist (data. aws_ssoadmin_instances . ssoadmin_instances . arns )[0 ]
5858 managed_policy_arn = " arn:aws:iam::aws:policy/${ each . value [" managed_policy_name" ]} "
@@ -73,18 +73,18 @@ resource "aws_ssoadmin_permission_set_inline_policy" "policy" {
7373
7474resource "aws_ssoadmin_account_assignment" "group_assignment" {
7575 for_each = local. enable_sso ? merge (flatten ([
76- for unit_name , unit in local . organization_config [" units" ] : [
77- for account_name in keys (local. organization_config [" units" ][unit_name ][" accounts" ]) : [
78- for group_name , group_assignments in lookup (local. organization_config [" units" ][unit_name ][" accounts" ][account_name ], " group_assignments" , {}) : {
79- for permission_set in group_assignments [" permission_sets" ] : " ${ account_name } _${ group_name } _${ permission_set } " => {
80- account_name = account_name
81- group_name = group_name
82- permission_set = permission_set
83- }
76+ for unit_name , unit in local . organization_config [" units" ] : [
77+ for account_name in keys (local. organization_config [" units" ][unit_name ][" accounts" ]) : [
78+ for group_name , group_assignments in lookup (local. organization_config [" units" ][unit_name ][" accounts" ][account_name ], " group_assignments" , {}) : {
79+ for permission_set in group_assignments [" permission_sets" ] : " ${ account_name } _${ group_name } _${ permission_set } " => {
80+ account_name = account_name
81+ group_name = group_name
82+ permission_set = permission_set
8483 }
85- ]
84+ }
8685 ]
87- ])... ) : {}
86+ ]
87+ ])... ) : {}
8888
8989 instance_arn = aws_ssoadmin_permission_set. permission_set [each . value [" permission_set" ]]. instance_arn
9090 permission_set_arn = aws_ssoadmin_permission_set. permission_set [each . value [" permission_set" ]]. arn
@@ -98,18 +98,18 @@ resource "aws_ssoadmin_account_assignment" "group_assignment" {
9898
9999resource "aws_ssoadmin_account_assignment" "user_assignment" {
100100 for_each = local. enable_sso ? merge (flatten ([
101- for unit_name , unit in local . organization_config [" units" ] : [
102- for account_name in keys (local. organization_config [" units" ][unit_name ][" accounts" ]) : [
103- for user_name , user_assignments in lookup (local. organization_config [" units" ][unit_name ][" accounts" ][account_name ], " user_assignments" , {}) : {
104- for permission_set in user_assignments [" permission_sets" ] : " ${ account_name } _${ user_name } _${ permission_set } " => {
105- account_name = account_name
106- user_name = user_name
107- permission_set = permission_set
108- }
101+ for unit_name , unit in local . organization_config [" units" ] : [
102+ for account_name in keys (local. organization_config [" units" ][unit_name ][" accounts" ]) : [
103+ for user_name , user_assignments in lookup (local. organization_config [" units" ][unit_name ][" accounts" ][account_name ], " user_assignments" , {}) : {
104+ for permission_set in user_assignments [" permission_sets" ] : " ${ account_name } _${ user_name } _${ permission_set } " => {
105+ account_name = account_name
106+ user_name = user_name
107+ permission_set = permission_set
109108 }
110- ]
109+ }
111110 ]
112- ])... ) : {}
111+ ]
112+ ])... ) : {}
113113
114114 instance_arn = aws_ssoadmin_permission_set. permission_set [each . value [" permission_set" ]]. instance_arn
115115 permission_set_arn = aws_ssoadmin_permission_set. permission_set [each . value [" permission_set" ]]. arn
0 commit comments