SSPROD-36960: Update the customer role name based on subscription (#28)

* Update * SSPROD-36960: Use only the subscription id
sysdiglabs · Feb 2, 2024 · d58be63 · d58be63
1 parent 383d139
commit d58be63
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/modules/services/service-principal/main.tf b/modules/services/service-principal/main.tf
@@ -45,12 +45,12 @@ resource "azurerm_role_assignment" "sysdig_reader" {
 # Create a Custom role for collecting authsettings
 #---------------------------------------------------------------------------------------------
 resource "azurerm_role_definition" "sysdig_cspm_role" {
-  name        = "sysdig-cspm-role"
+  name        = "sysdig-cspm-role-${var.subscription_id}"
   scope       = data.azurerm_subscription.primary.id
   description = "Custom role for collecting Authsettings for CIS Benchmark"
 
   permissions {
-    actions     = [
+    actions = [
       "Microsoft.Web/sites/config/list/action"
     ]
     not_actions = []