remove role

binbashar · Jan 4, 2023 · f139935 · f139935
1 parent 6a79448
commit f139935
Show file tree

Hide file tree

Showing 2 changed files with 0 additions and 51 deletions.
diff --git a/template/security/global/base-identities/roles.tf b/template/security/global/base-identities/roles.tf
@@ -29,31 +29,6 @@ module "iam_assumable_role_devops" {
   tags = local.tags
 }
 
-#
-# Assumable Role Cross-Account: Admin
-#
-module "iam_assumable_role_admin" {
-  source = "github.com/binbashar/terraform-aws-iam.git//modules/iam-assumable-role?ref=v4.1.0"
-
-  trusted_role_arns = [
-    "arn:aws:iam::${var.security_account_id}:root"
-  ]
-
-  create_role           = true
-  role_name             = "Admin"
-  admin_role_policy_arn = "arn:aws:iam::aws:policy/AdministratorAccess"
-  attach_admin_policy   = true
-  role_path             = "/"
-
-  #
-  # MFA setup
-  #
-  role_requires_mfa    = true
-  mfa_age              = 43200 # Maximum CLI/API session duration in seconds between 3600 and 43200
-  max_session_duration = 3600  # Max age of valid MFA (in seconds) for roles which require MFA
-
-  tags = local.tags
-}
 
 #
 # Assumable Role Cross-Account: Auditor Role

diff --git a/template/shared/global/base-identities/roles.tf b/template/shared/global/base-identities/roles.tf
@@ -29,32 +29,6 @@ module "iam_assumable_role_devops" {
   tags = local.tags
 }
 
-#
-# Assumable Role Cross-Account: Admin
-#
-module "iam_assumable_role_admin" {
-  source = "github.com/binbashar/terraform-aws-iam.git//modules/iam-assumable-role?ref=v4.1.0"
-
-  trusted_role_arns = [
-    "arn:aws:iam::${var.security_account_id}:root"
-  ]
-
-  create_role           = true
-  role_name             = "Admin"
-  admin_role_policy_arn = "arn:aws:iam::aws:policy/AdministratorAccess"
-  attach_admin_policy   = true
-  role_path             = "/"
-
-  #
-  # MFA setup
-  #
-  role_requires_mfa    = true
-  mfa_age              = 43200 # Maximum CLI/API session duration in seconds between 3600 and 43200
-  max_session_duration = 3600  # Max age of valid MFA (in seconds) for roles which require MFA
-
-  tags = local.tags
-}
-
 #
 # Assumable Role Cross-Account: Auditor Role
 #