Merge pull request #216 from NASA-IMPACT/fix/assume-role-arns

Add back read, write assume arns
NASA-IMPACT · Aug 13, 2024 · 226a6ed · 226a6ed
2 parents bbca364 + a1cc41b
commit 226a6ed
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 0 deletions.
diff --git a/infrastructure/main.tf b/infrastructure/main.tf
@@ -95,6 +95,8 @@ resource "local_file" "mwaa_variables" {
       ecs_cluster_name        = module.mwaa.cluster_name
       log_group_name          = module.mwaa.log_group_name
       mwaa_execution_role_arn = module.mwaa.mwaa_role_arn
+      assume_role_read_arn    = var.assume_role_arns[0]
+      assume_role_write_arn   = var.assume_role_arns[0]
       account_id              = local.account_id
       aws_region              = local.aws_region
       cognito_app_secret      = var.workflows_client_secret

diff --git a/infrastructure/mwaa_environment_variables.tpl b/infrastructure/mwaa_environment_variables.tpl
@@ -11,6 +11,8 @@
         "ACCOUNT_ID": "${account_id}",
         "AWS_REGION": "${aws_region}"
     },
+    "ASSUME_ROLE_READ_ARN": "${assume_role_read_arn}",
+    "ASSUME_ROLE_WRITE_ARN": "${assume_role_write_arn}",
     "COGNITO_APP_SECRET": "${cognito_app_secret}",
     "STAC_INGESTOR_API_URL": "${stac_ingestor_api_url}",
     "STAC_URL": "${stac_url}",