Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add support for assume_role_with_web_identity to the S3 remote state block #3931

Open
AndrewArmstrongVL opened this issue Feb 25, 2025 · 0 comments
Labels
enhancement New feature or request

Comments

@AndrewArmstrongVL
Copy link

Describe the enhancement

Add support for assume_role_with_web_identity to the S3 remote state block.

Implications of the feature

Direct support for this would be favourable over generating additional files or loosing the ability to automatically deploy underlying infrastructure. This will also maintain parity with underlying functionality of Terraform/OpenTOFU.
Several CI/CD tools (GitHub Action in our case) use OIDC to enable authentication with AWS, implementing this enhancement will allow for easier direct integrations with these tools.

Describe alternatives you've considered

  • One workaround is to not use the terragrunt remote_state block and use a generate block and generate a terraform file for the backend configuration.
  • Another workaround is to generate a ~/.aws/config file. and use the profile option.
@AndrewArmstrongVL AndrewArmstrongVL added the enhancement New feature or request label Feb 25, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

1 participant