fix assume role for local init

ministryofjustice · Dec 3, 2024 · ce18d64 · ce18d64
1 parent 4c68280
commit ce18d64
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/terraform/account/.envrc b/terraform/account/.envrc
@@ -1,5 +1,5 @@
 source ../../scripts/switch-terraform-version.sh
-export TF_CLI_ARGS_init="-backend-config=role_arn=arn:aws:iam::311462405659:role/operator -upgrade -reconfigure"
+export TF_CLI_ARGS_init="-backend-config=\"assume_role={role_arn=\\\"arn:aws:iam::311462405659:role/operator\\\"}\" -upgrade -reconfigure"
 export TF_WORKSPACE=development
 export TF_VAR_default_role=operator
 export TF_VAR_pagerduty_api_key=$(aws-vault exec mlpa-dev -- aws secretsmanager get-secret-value --secret-id "pagerduty_api_key" | jq -r .'SecretString')
diff --git a/terraform/environment/.envrc b/terraform/environment/.envrc
@@ -1,7 +1,7 @@
 #!/usr/bin/env bash
 
 source ../../scripts/switch-terraform-version.sh
-export TF_CLI_ARGS_init="-backend-config=role_arn=arn:aws:iam::311462405659:role/operator -upgrade -reconfigure"
+export TF_CLI_ARGS_init="-backend-config=\"assume_role={role_arn=\\\"arn:aws:iam::311462405659:role/operator\\\"}\" -upgrade -reconfigure"
 export TF_VAR_default_role=operator
 export TF_VAR_pagerduty_api_key=$(aws-vault exec mlpa-dev -- aws secretsmanager get-secret-value --secret-id "pagerduty_api_key" | jq -r .'SecretString')
 export TF_VAR_container_version=$(aws-vault exec management-global -- aws ssm get-parameter --name "/modernising-lpa/container-version/production" --query 'Parameter.Value' --output text)