Title
w
worried-soccer-67640
09/15/2022, 10:38 AMdoes anyone have any experience using a service account's role to assume up to 3 other roles ? i will need this for
infracostp
polite-engineer-31217
09/15/2022, 10:41 AMI’m doing it with terragrunt. 1 deployer role in the infra account which assume a deployer role in each account
w
worried-soccer-67640
09/15/2022, 10:42 AMhow does it assume the deployer role in each account?
p
polite-engineer-31217
09/15/2022, 10:58 AMin your terragrunt.hcl youhave this property
iam_role = "arn:aws:iam::${local.aws_account_id}:role/Deployer"w
worried-soccer-67640
09/15/2022, 10:58 AMah, yeah, i'm talking about infracost
p
polite-engineer-31217
09/15/2022, 11:10 AMinfracost just rely on tf/tg so it’s assuming the role you use in your tf
w
worried-soccer-67640
09/15/2022, 11:11 AMnah it doesn't.
https://www.infracost.io/docs/features/usage_based_resources/