initial commit

iac/fraud/s3_runtime/data.tf

@@ -1,14 +1,3 @@
-data "terraform_remote_state" "iam" {
-  backend = "s3"
-  config = {
-    skip_region_validation = true
-
-    region = data.aws_region.this.name
-    bucket = var.backend_bucket[data.aws_region.this.name]
-    key    = format(var.backend_pattern, "iam_role_assume")
-  }
-}
-
 data "terraform_remote_state" "s3" {
   count = (
     data.aws_region.this.name == element(keys(var.backend_bucket), 1)

iac/fraud/s3_runtime/default.tfvars

@@ -8,4 +8,5 @@ q = {
   sse_algorithm       = "AES256" # "aws:kms"
   versioning_status   = "Enabled"
   logs_prefix         = "s3_runtime_logs"
+  assume_role_name    = "spf-cicd-assume-role"
 }

iac/fraud/s3_runtime/locals.tf

@@ -7,5 +7,4 @@ locals {
     data.aws_region.this.name == element(keys(var.backend_bucket), 0)
     ? random_id.this.hex : data.terraform_remote_state.s3.0.outputs.spf_gid
   ) : var.spf_gid)
-  role_name = data.terraform_remote_state.iam.outputs.name
 }

iac/fraud/s3_runtime/state.tf

@@ -34,7 +34,7 @@ output "region2" {
 }
 
 output "role_name" {
-  value = local.role_name
+  value = format("%s-%s-%s", var.q.assume_role_name, aws_s3_bucket.this.region, local.spf_gid)
 }
 
 output "spf_gid" {