Hi All, if I’m running a Pulumi build from a dedicated ci-cd account, and the build machine assumes an admin role in my target account, is there a way for me to resolve the target account ID in code? In this situation

pulumi_aws.get_caller_identity().account_id

seems to return the ci-cd account.

get_caller_identity

has an optional

opts

param, I believe you can explicitly set the provider there

In my case, all actions should be performed in the

target

account. I’d just like to have the build machine in

ci-cd

to use

AssumeRole

to assume a cross-account admin role in the

target

account.

well if

pulumi_aws.get_caller_identity().account_id

is returning the

ci-cd

account id then I think the assume role might not be working?

Let me confirm it’s working as I understand it. Thanks for feedback.

great!