diff --git a/CHANGELOG.md b/CHANGELOG.md
index 724fa1b..056b3f6 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -15,3 +15,6 @@
* 1.0.4 -- 2023-12-13
- add user_mapping to replace the mail address
+
+* 1.0.5 -- 2023-12-19
+ - add relay_state
diff --git a/common/version.tf b/common/version.tf
index 4840281..4f63093 100644
--- a/common/version.tf
+++ b/common/version.tf
@@ -1,3 +1,3 @@
locals {
- _module_version = "1.0.4"
+ _module_version = "1.0.5"
}
diff --git a/permissionset/README.md b/permissionset/README.md
index 2d3b827..f0b0113 100644
--- a/permissionset/README.md
+++ b/permissionset/README.md
@@ -40,6 +40,7 @@ No modules.
| [managed\_policy\_names](#input\_managed\_policy\_names) | Names of AWS Managed Policy to attach to the permissionset | `list(string)` | `[]` | no |
| [name](#input\_name) | Permission set name | `string` | n/a | yes |
| [override\_prefixes](#input\_override\_prefixes) | Override built-in prefixes by component. This should be used primarily for common infrastructure things | `map(string)` | `{}` | no |
+| [relay\_state](#input\_relay\_state) | Relay State to pass along to permissionset | `string` | `null` | no |
| [session\_duration](#input\_session\_duration) | Permission set duration (default 8H) | `string` | `"PT8H"` | no |
| [tags](#input\_tags) | AWS Tags to apply to appropriate resources | `map(string)` | `{}` | no |
diff --git a/permissionset/main.tf b/permissionset/main.tf
index 1bf5686..ad458a3 100644
--- a/permissionset/main.tf
+++ b/permissionset/main.tf
@@ -7,6 +7,7 @@ resource "aws_ssoadmin_permission_set" "pset" {
description = local.description
instance_arn = var.instance_arn
session_duration = var.session_duration
+ relay_state = var.relay_state
tags = merge(
local.base_tags,
diff --git a/permissionset/variables.tf b/permissionset/variables.tf
index 56a3155..029738b 100644
--- a/permissionset/variables.tf
+++ b/permissionset/variables.tf
@@ -37,3 +37,9 @@ variable "inline_policy" {
type = string
default = null
}
+
+variable "relay_state" {
+ description = "Relay State to pass along to permissionset"
+ type = string
+ default = null
+}