chore(ci-staging): assign permissions (#636)

rust-lang · Dec 3, 2024 · e638ce3 · e638ce3
1 parent 1a00203
commit e638ce3
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/terragrunt/modules/aws-organization/groups.tf b/terragrunt/modules/aws-organization/groups.tf
@@ -328,6 +328,16 @@ locals {
         permissions : [aws_ssoadmin_permission_set.read_only_access] },
       ]
     },
+    # ci staging
+    {
+      account : aws_organizations_account.ci_staging,
+      groups : [
+        { group : aws_identitystore_group.infra-admins,
+        permissions : [aws_ssoadmin_permission_set.read_only_access, aws_ssoadmin_permission_set.administrator_access] },
+        { group : aws_identitystore_group.infra,
+        permissions : [aws_ssoadmin_permission_set.read_only_access] },
+      ]
+    },
   ]
 }