nice-father-44210
11/23/2021, 5:35 PMpulumi_aws.get_caller_identity().account_id
seems to return the ci-cd account.freezing-van-87649
11/23/2021, 5:38 PMget_caller_identity
has an optional opts
param, I believe you can explicitly set the provider thereci-cd
account?
Or should all actions/calls be performed in the target
account?nice-father-44210
11/23/2021, 5:42 PMtarget
account. I’d just like to have the build machine in ci-cd
to use AssumeRole
to assume a cross-account admin role in the target
account.target
account ID in code.AssumeRole
is all taken care of in the CD tool itself. Once Pulumi build starts running, I don’t need any context switching.freezing-van-87649
11/23/2021, 5:44 PMpulumi_aws.get_caller_identity().account_id
is returning the ci-cd
account id then I think the assume role might not be working?assumeRole
setting: https://www.pulumi.com/registry/packages/aws/installation-configuration/nice-father-44210
11/23/2021, 5:46 PMAssumeRole
in the CD tool. Using the aws:assumeRole
config settings worked like a charm. Thanks!freezing-van-87649
11/23/2021, 6:59 PM