Skip to content

Commit 5a438e5

Browse files
committed
Fix account parameter usage in assume role step for improved clarity
1 parent 03b7fc0 commit 5a438e5

1 file changed

Lines changed: 4 additions & 3 deletions

File tree

azure/components/aws-assume-role.yml

Lines changed: 4 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -34,9 +34,9 @@ steps:
3434
aws_role="$(ROLE)"
3535
echo "assume role: '${aws_role}'"
3636
37-
if [[ "${{ parameters.aws_account }}" =~ ^(prod|dev)$ ]]; then # NOSONAR
38-
echo "account is ${{ parameters.aws_account }}" # NOSONAR
39-
account_id="$(aws ssm get-parameter --name /account-ids/${{ parameters.aws_account }} --query Parameter.Value --output text)" # NOSONAR
37+
if [[ "${ACCOUNT}" =~ ^(prod|dev)$ ]]; then
38+
echo "account is ${ACCOUNT}"
39+
account_id="$(aws ssm get-parameter --name /account-ids/${ACCOUNT} --query Parameter.Value --output text)"
4040
if [[ "${aws_role}" != arn:aws:iam:* ]]; then
4141
aws_role="arn:aws:iam::${account_id}:role/${aws_role}"
4242
fi
@@ -95,5 +95,6 @@ steps:
9595
fi
9696
env:
9797
PROFILE: ${{ parameters.profile }}
98+
ACCOUNT: ${{ parameters.aws_account }}
9899
displayName: assume role
99100
condition: and(succeeded(), eq(variables['ROLE_EXISTS'], 'true'))

0 commit comments

Comments
 (0)