fix(agentless-scanning): stackeset administration role (#30)

* per: hashicorp/terraform-provider-aws#23464 fixes an issue when service managed stacksets, working around an AWS provider bug
sysdiglabs · Dec 30, 2024 · 3bb1277 · 3bb1277
1 parent 4c213dd
commit 3bb1277
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/modules/agentless-scanning/organizational.tf b/modules/agentless-scanning/organizational.tf
@@ -40,6 +40,10 @@ resource "aws_cloudformation_stack_set" "ou_resources_stackset" {
     retain_stacks_on_account_removal = false
   }
 
+  lifecycle {
+    ignore_changes = [administration_role_arn] # https://github.com/hashicorp/terraform-provider-aws/issues/23464
+  }
+
   template_body = <<TEMPLATE
 Resources:
   ScanningRole: