Title
#general
g

Gurpal Singh

09/15/2022, 10:38 AM
does anyone have any experience using a service account's role to assume up to 3 other roles ? i will need this for
infracost
s

Sylvain Witmeyer

09/15/2022, 10:41 AM
I’m doing it with terragrunt. 1 deployer role in the infra account which assume a deployer role in each account
g

Gurpal Singh

09/15/2022, 10:42 AM
how does it assume the deployer role in each account?
s

Sylvain Witmeyer

09/15/2022, 10:58 AM
in your terragrunt.hcl youhave this property
iam_role = "arn:aws:iam::${local.aws_account_id}:role/Deployer"
g

Gurpal Singh

09/15/2022, 10:58 AM
ah, yeah, i'm talking about infracost
s

Sylvain Witmeyer

09/15/2022, 11:10 AM
infracost just rely on tf/tg so it’s assuming the role you use in your tf
g

Gurpal Singh

09/15/2022, 11:11 AM