diff --git a/CHANGELOG.md b/CHANGELOG.md index 724fa1b..056b3f6 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -15,3 +15,6 @@ * 1.0.4 -- 2023-12-13 - add user_mapping to replace the mail address + +* 1.0.5 -- 2023-12-19 + - add relay_state diff --git a/common/version.tf b/common/version.tf index 4840281..4f63093 100644 --- a/common/version.tf +++ b/common/version.tf @@ -1,3 +1,3 @@ locals { - _module_version = "1.0.4" + _module_version = "1.0.5" } diff --git a/permissionset/README.md b/permissionset/README.md index 2d3b827..f0b0113 100644 --- a/permissionset/README.md +++ b/permissionset/README.md @@ -40,6 +40,7 @@ No modules. | [managed\_policy\_names](#input\_managed\_policy\_names) | Names of AWS Managed Policy to attach to the permissionset | `list(string)` | `[]` | no | | [name](#input\_name) | Permission set name | `string` | n/a | yes | | [override\_prefixes](#input\_override\_prefixes) | Override built-in prefixes by component. This should be used primarily for common infrastructure things | `map(string)` | `{}` | no | +| [relay\_state](#input\_relay\_state) | Relay State to pass along to permissionset | `string` | `null` | no | | [session\_duration](#input\_session\_duration) | Permission set duration (default 8H) | `string` | `"PT8H"` | no | | [tags](#input\_tags) | AWS Tags to apply to appropriate resources | `map(string)` | `{}` | no | diff --git a/permissionset/main.tf b/permissionset/main.tf index 1bf5686..ad458a3 100644 --- a/permissionset/main.tf +++ b/permissionset/main.tf @@ -7,6 +7,7 @@ resource "aws_ssoadmin_permission_set" "pset" { description = local.description instance_arn = var.instance_arn session_duration = var.session_duration + relay_state = var.relay_state tags = merge( local.base_tags, diff --git a/permissionset/variables.tf b/permissionset/variables.tf index 56a3155..029738b 100644 --- a/permissionset/variables.tf +++ b/permissionset/variables.tf @@ -37,3 +37,9 @@ variable "inline_policy" { type = string default = null } + +variable "relay_state" { + description = "Relay State to pass along to permissionset" + type = string + default = null +}