terragrunt
terragrunt copied to clipboard
feat: Add support for all the assume-role attributes in the S3 remote state block
Describe the solution you'd like
Add support for extra assume-role attributes for S3 remote_state backend.
Right now it looks like terragrunt supports role_arn, external_id and session_name but not the session duration, the session policy nor the session tags attributes.
terraform s3 backend documentation: https://developer.hashicorp.com/terraform/language/settings/backends/s3#assume-role-configuration
Describe alternatives you've considered
One alternative is to not use the terragrunt remote_state block and use a generate block and generate a terraform file for the backend configuration. Although doing this takes away the automatic deployment of the S3 bucket and dynamoDB table.
Additionally, assume_role_with_web_identity is not supported either. I am currently working around this by generating a ~/.aws/config file.
This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for raising this issue.